diff --git a/tasks/system_cfg/firewall.yml b/tasks/system_cfg/firewall.yml
index 3de9df5f20cc1f6c1df736f8486b63566ad88826..c3b5576067204ca0a9d8ada41f3e5cfe5f130afa 100644
--- a/tasks/system_cfg/firewall.yml
+++ b/tasks/system_cfg/firewall.yml
@@ -59,6 +59,14 @@
     port: '80'
     proto: tcp
 
+- name: UFW | allow tcp port 8006 IN
+  when: inventory_hostname in groups.pve
+  community.general.ufw:
+    direction: in
+    rule: allow
+    port: '8006'
+    proto: tcp
+
 - name: UFW | enable & set logging
   community.general.ufw:
     logging: low