diff --git a/mara-ubuntu-upgrade-script b/mara-ubuntu-upgrade-script
index 7b351ff..431b435 100644
--- a/mara-ubuntu-upgrade-script
+++ b/mara-ubuntu-upgrade-script
@@ -133,6 +133,7 @@ sudo ufw allow from 192.168.4.6 to any proto udp port 1024:65535 comment "TCP AL
 sudo ufw allow from 192.168.4.7 to any proto tcp port 1024:65535 comment "UDP ALL for Sonos Roam"
 sudo ufw allow from 192.168.4.7 to any proto udp port 1024:65535 comment "TCP ALL for Sonos Roam"
 sudo ufw allow from ${NW} to any port 1883 comment "mqtt/mosquitto broker"
+sudo ufw allow from ${NW} to any port 8883 comment "mqtt/mosquitto broker (tls)"
 sudo ufw allow proto udp from ${NW} to any port 1900 comment "upnp/emby"
 sudo ufw allow proto udp from ${NW} to any port 1901 comment "upnp/sonos"
 sudo ufw allow proto udp from ${NW} port 1900  comment "upnp/response"