diff --git a/pillar/role/salt/master.sls b/pillar/role/salt/master.sls
index ee83887..59f4908 100644
--- a/pillar/role/salt/master.sls
+++ b/pillar/role/salt/master.sls
@@ -79,3 +79,13 @@ salt:
     auth.ldap.binddn: ${'secret_salt:master:auth.ldap.binddn'}
     auth.ldap.bindpw: ${'secret_salt:master:auth.ldap.bindpw'}
     auth.ldap.filter: ${'secret_salt:master:auth.ldap.filter'}
+
+firewalld:
+  zones:
+    internal:
+      services:
+        - salt-master
+      ports:
+        - comment: salt-api
+          port: 4550
+          protocol: tcp