diff --git a/k8s/network-policy.yaml b/k8s/network-policy.yaml
index 2831c4c..311abf3 100644
--- a/k8s/network-policy.yaml
+++ b/k8s/network-policy.yaml
@@ -86,10 +86,11 @@ spec:
     - protocol: TCP
       port: 8080
   # Allow to Authentik for JWT validation (JWKS endpoint)
+  # Service port 80 maps to pod port 9000
   - to:
     - namespaceSelector:
         matchLabels:
           kubernetes.io/metadata.name: iam
     ports:
     - protocol: TCP
-      port: 80
+      port: 9000