diff --git a/infrastructure/addons/flux-ui/kustomization.yaml b/infrastructure/addons/flux-ui/kustomization.yaml
index 731e252..d143ce2 100644
--- a/infrastructure/addons/flux-ui/kustomization.yaml
+++ b/infrastructure/addons/flux-ui/kustomization.yaml
@@ -3,4 +3,5 @@ kind: Kustomization
 resources:
   - ocirepository-weave-gitops.yaml
   - helmrelease-weave-gitops.yaml
+  - networkpolicy-weave-gitops-tailscale.yaml
   - weave-gitops-tailscale-service.yaml
diff --git a/infrastructure/addons/flux-ui/networkpolicy-weave-gitops-tailscale.yaml b/infrastructure/addons/flux-ui/networkpolicy-weave-gitops-tailscale.yaml
new file mode 100644
index 0000000..b1d21fa
--- /dev/null
+++ b/infrastructure/addons/flux-ui/networkpolicy-weave-gitops-tailscale.yaml
@@ -0,0 +1,19 @@
+apiVersion: networking.k8s.io/v1
+kind: NetworkPolicy
+metadata:
+  name: weave-gitops-tailscale-ingress
+  namespace: flux-system
+spec:
+  podSelector:
+    matchLabels:
+      app.kubernetes.io/name: weave-gitops
+  policyTypes:
+    - Ingress
+  ingress:
+    - from:
+        - namespaceSelector:
+            matchLabels:
+              kubernetes.io/metadata.name: tailscale-system
+      ports:
+        - protocol: TCP
+          port: 9001