diff --git a/src/data/playground-configs.ts b/src/data/playground-configs.ts
index dffc14a..0beeb90 100644
--- a/src/data/playground-configs.ts
+++ b/src/data/playground-configs.ts
@@ -1807,6 +1807,27 @@ export const chartConfigs: Record<string, ChartConfig> = {
         },
       ],
     },
+    {
+      name: 'Network Policy',
+      collapsible: true,
+      gateField: 'networkPolicy.enabled',
+      fields: [
+        {
+          label: 'Extra Egress CIDR',
+          key: 'networkPolicy.extraEgress[0].to[0].ipBlock.cidr',
+          type: 'text',
+          default: '10.80.0.0/16',
+          description: 'Additional web egress destination',
+        },
+        {
+          label: 'Extra Egress Port',
+          key: 'networkPolicy.extraEgress[0].ports[0].port',
+          type: 'number',
+          default: '443',
+          description: 'Additional TCP egress port',
+        },
+      ],
+    },
   ],
   'openreel-video': [
     {
diff --git a/src/pages/docs/charts/opencut.mdx b/src/pages/docs/charts/opencut.mdx
index 1cb2254..dc992ac 100644
--- a/src/pages/docs/charts/opencut.mdx
+++ b/src/pages/docs/charts/opencut.mdx
@@ -119,6 +119,7 @@ redisHttp:
 
 networkPolicy:
   enabled: true
+  extraEgress: []
 ```
 
 `opencut.siteUrl` should match the externally visible URL exactly. Authentication callback and generated links depend on
@@ -235,18 +236,19 @@ reachable from the OpenCut pod.
 
 ## Values
 
-| Parameter                 | Default                       | Description                                          |
-| ------------------------- | ----------------------------- | ---------------------------------------------------- |
-| `replicaCount`            | `1`                           | Number of OpenCut pods when autoscaling is disabled. |
-| `image.repository`        | `docker.io/helmforge/opencut` | HelmForge OpenCut image.                             |
-| `postgresql.enabled`      | `true`                        | Deploy HelmForge PostgreSQL dependency.              |
-| `redis.enabled`           | `true`                        | Deploy HelmForge Redis dependency.                   |
-| `database.external.host`  | `""`                          | External PostgreSQL host.                            |
-| `redisHttp.enabled`       | `true`                        | Deploy Redis-over-HTTP bridge.                       |
-| `service.ipFamilyPolicy`  | `null`                        | Optional Service dual-stack policy.                  |
-| `ingress.enabled`         | `false`                       | Render Ingress.                                      |
-| `gateway.enabled`         | `false`                       | Render Gateway API HTTPRoute.                        |
-| `externalSecrets.enabled` | `false`                       | Render ExternalSecret resources.                     |
+| Parameter                   | Default                       | Description                                          |
+| --------------------------- | ----------------------------- | ---------------------------------------------------- |
+| `replicaCount`              | `1`                           | Number of OpenCut pods when autoscaling is disabled. |
+| `image.repository`          | `docker.io/helmforge/opencut` | HelmForge OpenCut image.                             |
+| `postgresql.enabled`        | `true`                        | Deploy HelmForge PostgreSQL dependency.              |
+| `redis.enabled`             | `true`                        | Deploy HelmForge Redis dependency.                   |
+| `database.external.host`    | `""`                          | External PostgreSQL host.                            |
+| `redisHttp.enabled`         | `true`                        | Deploy Redis-over-HTTP bridge.                       |
+| `service.ipFamilyPolicy`    | `null`                        | Optional Service dual-stack policy.                  |
+| `ingress.enabled`           | `false`                       | Render Ingress.                                      |
+| `gateway.enabled`           | `false`                       | Render Gateway API HTTPRoute.                        |
+| `networkPolicy.extraEgress` | `[]`                          | Append full custom web egress rules.                 |
+| `externalSecrets.enabled`   | `false`                       | Render ExternalSecret resources.                     |
 
 ## Links
 
diff --git a/src/pages/playground.astro b/src/pages/playground.astro
index e81dd6d..03ea34c 100644
--- a/src/pages/playground.astro
+++ b/src/pages/playground.astro
@@ -61,6 +61,7 @@ const siteSyncPlaygroundConfigs: Record<string, string> = {
   'metrics-server': 'src/data/playground-configs.ts',
   notediscovery: 'src/data/playground-configs.ts',
   'oauth2-proxy': 'src/data/playground-configs.ts',
+  opencut: 'src/data/playground-configs.ts',
   openhab: 'src/data/playground-configs.ts',
   poznote: 'src/data/playground-configs.ts',
   qdrant: 'src/data/playground-configs.ts',