diff --git a/infra/k8s/network-policies/infrastructure.yaml b/infra/k8s/network-policies/infrastructure.yaml
index 59278dc25..48b252975 100644
--- a/infra/k8s/network-policies/infrastructure.yaml
+++ b/infra/k8s/network-policies/infrastructure.yaml
@@ -81,6 +81,9 @@ spec:
         - podSelector:
             matchLabels:
               app.kubernetes.io/name: minio-init
+        - podSelector:                              # tailscale proxy fronts minio.fxhnt.ai (S3 API)
+            matchLabels:
+              app.kubernetes.io/name: tailscale-gitlab-proxy
       ports:
         - protocol: TCP
           port: 9000