diff --git a/ansible/idr-omero-readonly.yml b/ansible/idr-omero-readonly.yml
index e6b010d9..f0125c61 100644
--- a/ansible/idr-omero-readonly.yml
+++ b/ansible/idr-omero-readonly.yml
@@ -15,7 +15,7 @@
       state: directory
       mode: 0755
     # Lock down the read-write node in the read-only cluster
-  - name: install checkpolicy
+  - name: install nfs-utils
     become: true
     ansible.builtin.dnf:
       update_cache: true
@@ -23,7 +23,10 @@
       state: present
 
   - name: Display nfs-server status
-    command: sudo systemctl enable --now nfs-server
+    command:
+      - systemctl enable --now nfs-server
+      - firewall-cmd --permanent --add-service=nfs
+      - firewall-cmd --reload
     register: command_output
 
   - name: Print to console