diff --git a/ansible/roles/gateway/templates/nftables.conf.j2 b/ansible/roles/gateway/templates/nftables.conf.j2
index 24c9b24..a5725af 100644
--- a/ansible/roles/gateway/templates/nftables.conf.j2
+++ b/ansible/roles/gateway/templates/nftables.conf.j2
@@ -35,6 +35,9 @@ table inet filter {
         # Monitoring — node_exporter (scraping par Prometheus : nœuds cluster + pods 10.42/16)
         tcp dport 9100 ip saddr { 192.168.10.0/24, 10.42.0.0/16 } accept
 
+        # AlertManager webhook → Hermes monitor (pods k8s 10.42/16 + nœuds cluster)
+        tcp dport 9093 ip saddr { 192.168.10.0/24, 10.42.0.0/16 } accept
+
         # Hermes gateway (accès LAN domestique + cluster + pods k8s pour alertmanager webhook)
         tcp dport 8080 ip saddr { 192.168.1.0/24, 192.168.10.0/24, 10.42.0.0/16 } accept