diff --git a/ops/nixos/etheroute-lon01/default.nix b/ops/nixos/etheroute-lon01/default.nix
index aed860d8ee..8127c54bd6 100644
--- a/ops/nixos/etheroute-lon01/default.nix
+++ b/ops/nixos/etheroute-lon01/default.nix
@@ -186,6 +186,11 @@ in {
         login_hint = "lukegb@lukegb.com";
       };
 
+      jwt_claims_headers = [
+        "email"
+        "user"
+      ];
+
       databroker_storage_type = "redis";
       databroker_storage_connection_string = "redis://127.0.0.1:6379/15";
 
@@ -195,12 +200,12 @@ in {
       policy = let
         baseConfig = {
           allowed_domains = [ "lukegb.com" ];
+          pass_identity_headers = true;
         };
         serviceOnHost = server: hostName: baseConfig // {
           from = "https://${hostName}";
           to = "http://${server}";
           preserve_host_header = true;
-          pass_identity_headers = true;
         };
         hostToServices = {
           clouvider-fra01 = [