diff --git a/roles/minio/tasks/deploy.yml b/roles/minio/tasks/deploy.yml
index 0cda700..e44f0ea 100644
--- a/roles/minio/tasks/deploy.yml
+++ b/roles/minio/tasks/deploy.yml
@@ -105,3 +105,16 @@
     state: started
   tags:
   - service
+
+- name: ensure firewall is configured for minio
+  firewalld:
+    port: '{{ item }}/tcp'
+    permanent: true
+    immediate: true
+    state: enabled
+  loop:
+  - 9000
+  - 9090
+  when: host_uses_firewalld|d(true)|bool
+  tags:
+  - firewalld