diff --git a/terraform/modules/app_server/cloud-init.yaml.tpl b/terraform/modules/app_server/cloud-init.yaml.tpl
index 8c607b8..1e8dcb7 100644
--- a/terraform/modules/app_server/cloud-init.yaml.tpl
+++ b/terraform/modules/app_server/cloud-init.yaml.tpl
@@ -88,6 +88,7 @@ write_files:
       ufw allow in 3333/tcp comment 'WebRTC TCP'
       ufw allow in 3333/udp comment 'WebRTC UDP'
       ufw allow in 3334/tcp comment 'WebRTC TCP fallback'
+      ufw allow in 8088/tcp comment 'HLS/LLHLS streaming'
 
       # Inbound: VPC traffic (includes system SSH)
       ufw allow in from ${vpc_ip_range} comment 'VPC internal'