diff --git a/config/nginx.newsblur.conf b/config/nginx.newsblur.conf
index b07eb7567..de1caafdf 100644
--- a/config/nginx.newsblur.conf
+++ b/config/nginx.newsblur.conf
@@ -10,7 +10,7 @@ upstream icon_server {
 
 server {
     listen   80;
-    # listen   443 default_server ssl;
+    listen   443 default_server ssl;
 
     # ssl                     on;
     ssl_certificate         /srv/newsblur/config/certificates/newsblur.com.crt;
diff --git a/fabfile.py b/fabfile.py
index cd3b3732e..b9b424427 100644
--- a/fabfile.py
+++ b/fabfile.py
@@ -737,7 +737,8 @@ def setup_db_firewall():
     for ip in set(env.roledefs['app'] + 
                   env.roledefs['dbdo'] + 
                   env.roledefs['dev'] + 
-                  env.roledefs['debug']):
+                  env.roledefs['debug'] + 
+                  env.roledefs['task']):
         sudo('ufw allow proto tcp from %s to any port %s' % (
             ip,
             ','.join(map(str, ports))