diff --git a/manifests/otel/alloy.pp b/manifests/otel/alloy.pp
index b33167b3b..8c6b77719 100644
--- a/manifests/otel/alloy.pp
+++ b/manifests/otel/alloy.pp
@@ -48,4 +48,8 @@
     enable  => 'true',
     require => Package['alloy'],
   }
+  sunet::nftables::docker_expose { 'allow_local_opentelemetry' :
+    allow_clients => '172.16.0.0/12',
+    port          => [4317, 4318],
+  }
 }