diff --git a/kube/deploy/core/secrets/onepassword-connect/app/netpol.yaml b/kube/deploy/core/secrets/onepassword-connect/app/netpol.yaml
index eb969777..7feb4e40 100644
--- a/kube/deploy/core/secrets/onepassword-connect/app/netpol.yaml
+++ b/kube/deploy/core/secrets/onepassword-connect/app/netpol.yaml
@@ -24,11 +24,11 @@ spec:
     - toEndpoints:
         - matchLabels:
             io.kubernetes.pod.namespace: *app
-    - toEntities:
-        - world
+    - toFQDNs:
+        - matchPattern: "*.1password.com"
       toPorts:
         - ports:
-            - port: "8443"
+            - port: "443"
 ---
 # yaml-language-server: $schema=https://raw.githubusercontent.com/datreeio/CRDs-catalog/main/cilium.io/ciliumclusterwidenetworkpolicy_v2.json
 apiVersion: cilium.io/v2