diff --git a/tests/keycloak.nix b/tests/keycloak.nix
index 59b085a..9f5241b 100644
--- a/tests/keycloak.nix
+++ b/tests/keycloak.nix
@@ -81,6 +81,8 @@ in
       nachtigall.succeed("ping 127.0.0.1 -c 2")
       nachtigall.wait_for_unit("nginx.service")
       nachtigall.wait_for_unit("keycloak.service")
+      nachtigall.wait_for_open_port(8080)
+      nachtigall.wait_for_open_port(443)
       nachtigall.wait_until_succeeds("curl http://127.0.0.1:8080/")
       nachtigall.wait_until_succeeds("curl https://auth.test.pub.solar/")
 
diff --git a/tests/website.nix b/tests/website.nix
index 452262b..6d4f46d 100644
--- a/tests/website.nix
+++ b/tests/website.nix
@@ -48,12 +48,14 @@
     acme_server.wait_for_unit("system.slice")
     acme_server.wait_for_unit("step-ca.service")
     acme_server.succeed("ping ca.test.pub.solar -c 2")
+    acme_server.wait_for_open_port(443)
     acme_server.wait_until_succeeds("curl 127.0.0.1:443")
 
     nachtigall.wait_for_unit("system.slice")
     nachtigall.succeed("ping test.pub.solar -c 2")
     nachtigall.succeed("ping ca.test.pub.solar -c 2")
     nachtigall.wait_for_unit("nginx.service")
+    nachtigall.wait_for_open_port(443)
     nachtigall.wait_until_succeeds("curl https://test.pub.solar/")
   '';
 }