diff --git a/hosts/sql/default.nix b/hosts/sql/default.nix
index bc43010..707f731 100644
--- a/hosts/sql/default.nix
+++ b/hosts/sql/default.nix
@@ -10,8 +10,8 @@
   networking = {
     hostName = "sql";
     firewall.extraInputRules = ''
-      ip saddr 195.160.173.0/24 ip daddr 195.160.173.15 tcp dport 5432 accept
-      ip6 saddr 2001:678:760:cccb::/64 ip6 daddr 2001:678:760:cccb::15 tcp dport 5432 accept
+      ip saddr 195.160.173.0/24 ip daddr 195.160.173.15 tcp dport 5432 accept comment "Allow Postgres clients from cccb network"
+      ip6 saddr 2001:678:760:cccb::/64 ip6 daddr 2001:678:760:cccb::15 tcp dport 5432 accept comment "Allow Postgres clients from cccb network"
     '';
   };