diff --git a/kubernetes/infrastructure/network-policies/home-assistant-ns.yaml b/kubernetes/infrastructure/network-policies/home-assistant-ns.yaml
index 236d02b0..66492ee5 100644
--- a/kubernetes/infrastructure/network-policies/home-assistant-ns.yaml
+++ b/kubernetes/infrastructure/network-policies/home-assistant-ns.yaml
@@ -194,6 +194,13 @@ spec:
               protocol: TCP
             - port: "8883"
               protocol: TCP
+    # MQTT clients on the private LAN, TLS only.
+    - fromCIDRSet:
+        - cidrGroupRef: net-privat
+      toPorts:
+        - ports:
+            - port: "8883"
+              protocol: TCP
 ---
 apiVersion: cilium.io/v2
 kind: CiliumNetworkPolicy