diff --git a/group_vars/git.yaml b/group_vars/git.yaml
index 2aaa490..03f8559 100644
--- a/group_vars/git.yaml
+++ b/group_vars/git.yaml
@@ -7,8 +7,8 @@ git_server_title: Gitlair
 git_server_bootstrap_cert: no
 
 group_nft_input:
-  - "# Allow web-traffic from world"
-  - "tcp dport { http, https } accept"
+  - "# Allow ssh(git) + web-traffic from world"
+  - "tcp dport { ssh, http, https } accept"
 
 nginx_client_max_body_size: 4G