diff --git a/deployment/horizon/horizon-container-puppet.yaml b/deployment/horizon/horizon-container-puppet.yaml
index 4df4c08d29..f29fea7ba7 100644
--- a/deployment/horizon/horizon-container-puppet.yaml
+++ b/deployment/horizon/horizon-container-puppet.yaml
@@ -172,7 +172,10 @@ outputs:
       firewall_rules:
         '126 horizon':
           dport:
-            - 80
+            - if:
+                - {get_param: EnableInternalTLS}
+                - 443
+                - 80
       firewall_frontend_rules:
         '100 horizon_haproxy_frontend':
           dport: