diff --git a/k8s/network-policy.yaml b/k8s/network-policy.yaml
index 44364db..0f002f3 100644
--- a/k8s/network-policy.yaml
+++ b/k8s/network-policy.yaml
@@ -46,6 +46,14 @@ spec:
     ports:
     - protocol: TCP
       port: 8080
+  # Allow from paperless namespace (paperless-ai document auto-tagging)
+  - from:
+    - namespaceSelector:
+        matchLabels:
+          kubernetes.io/metadata.name: paperless
+    ports:
+    - protocol: TCP
+      port: 8080
   egress:
   # Allow DNS
   - to: