diff --git a/resources/z9/z9-router/nftables/nftables.conf b/resources/z9/z9-router/nftables/nftables.conf
index b82c3e02..46464d5c 100644
--- a/resources/z9/z9-router/nftables/nftables.conf
+++ b/resources/z9/z9-router/nftables/nftables.conf
@@ -113,6 +113,8 @@ table inet forward {
 
         # Fux PVE backups
         ip6 saddr { 2a07:c481:0:1::/64 } ip6 daddr { 2a07:c481:1:36::15/128 } accept comment "allow Fux PVE to access CCCHH PBS"
+        # chaosknoten PVE backups
+        ip6 saddr { 2a00:14b0:4200:3000::126:1/128 } ip6 daddr { 2a07:c481:1:36::15/128 } accept comment "allow chaosknoten PVE to access CCCHH PBS"
 
         # staubi and staubiv2 to club-assistant
         ip saddr { 10.89.212.232/32, 10.89.212.233/32 } ip daddr { 10.89.213.22/32 } accept comment "allow staubi and staubiv2 to club-assistant"