diff --git a/host_vars/jitsi.yaml b/host_vars/jitsi.yaml
index 9e7d222..c829b3a 100644
--- a/host_vars/jitsi.yaml
+++ b/host_vars/jitsi.yaml
@@ -5,4 +5,17 @@ webserver:
     port: 8080
     bigrequests: false
     https: true
+firewall:
+  - port: "ssh"
+    proto: tcp
+    interface: "eth0"
+  - port: "https"
+    proto: tcp
+    interface: "eth0"
+  - port: "4443"
+    proto: tcp
+    interface: "eth0"
+  - port: "10000"
+    proto: tcp
+    interface: "eth0"
 ...
diff --git a/infra.yaml b/infra.yaml
index be1a71d..51a5648 100644
--- a/infra.yaml
+++ b/infra.yaml
@@ -8,6 +8,16 @@
     - webserver
     - internalsmtp
 
+- name: "Deploy Jitsi Meet server"
+  hosts: jitsi
+  roles:
+    - netplan
+    - common
+    - docker
+    - webserver
+    - internalsmtp
+    - customfirewall
+
 - name: "Deploy database server base"
   hosts: postgres
   roles:
diff --git a/inventory.yaml b/inventory.yaml
index 78a100e..99608cb 100644
--- a/inventory.yaml
+++ b/inventory.yaml
@@ -36,7 +36,6 @@ all:
         ytmirror:
         mastodon:
         librespeed:
-        jitsi:
     nightlydocker:
       hosts:
         matrix:
@@ -48,5 +47,4 @@ all:
         ytmirror:
         mastodon:
         librespeed:
-        jitsi:
 ...
diff --git a/nightly.yaml b/nightly.yaml
index 34d5bb2..ba3c212 100644
--- a/nightly.yaml
+++ b/nightly.yaml
@@ -6,6 +6,14 @@
     - webserver
     - internalsmtp
 
+- name: "Deploy Jitsi Meet server"
+  hosts: jitsi
+  roles:
+    - common
+    - webserver
+    - internalsmtp
+    - customfirewall
+
 - name: "Setup neko"
   hosts: neko
   roles: