diff --git a/infrastructure/postgres/user-namespace-network-policy.yaml b/infrastructure/postgres/user-namespace-network-policy.yaml
index fa2530518da22dbb5009807ee9ac6ff920cfcc3a..29097298b710f7f8533c33f2a6f0a43039bf4953 100644
--- a/infrastructure/postgres/user-namespace-network-policy.yaml
+++ b/infrastructure/postgres/user-namespace-network-policy.yaml
@@ -20,6 +20,15 @@ spec:
             - namespaceSelector:
                 matchLabels:
                   name: zalando-postgres
-          podSelector: {}
+          podSelector:
+            matchLabels:
+              application: spilo
           policyTypes:
           - Ingress
+          ports:
+          - containerPort: 8008
+            protocol: TCP
+          - containerPort: 5432
+            protocol: TCP
+          - containerPort: 8080
+            protocol: TCP