diff --git a/group_vars/mirror.yml b/group_vars/mirror.yml
index 31fc5f0..305bf2e 100644
--- a/group_vars/mirror.yml
+++ b/group_vars/mirror.yml
@@ -7,3 +7,4 @@ datadisk_size:
 firewall_in:
   - {proto: tcp, port: 22, from: [172.20.20.0/22]}
   - {proto: tcp, port: 443, from: [172.20.20.0/22]}
+  - {proto: tcp, port: 873, from: [172.20.20.0/22]}
diff --git a/playbooks/mirror.yml b/playbooks/mirror.yml
index 3786874..64d6201 100644
--- a/playbooks/mirror.yml
+++ b/playbooks/mirror.yml
@@ -66,3 +66,4 @@
         - "--include=/syspatch/?.?/amd64/*"
         - "--exclude=*"
         - "--delete-excluded"
+    - role: rsync/server