diff --git a/ops/nixos/etheroute-lon01/default.nix b/ops/nixos/etheroute-lon01/default.nix
index 8cc4ffc8d9..b31753c10f 100644
--- a/ops/nixos/etheroute-lon01/default.nix
+++ b/ops/nixos/etheroute-lon01/default.nix
@@ -225,6 +225,7 @@ in {
         (service "totoro:9090" "prometheus.int.lukegb.com" {})
         (service "totoro:9093" "alertmanager.int.lukegb.com" {})
         (service "totoro:3000" "grafana.int.lukegb.com" {})
+        (secureService "swann:8443" "unifi.int.lukegb.com" {})
         (secureService "totoro" "invoices.lukegb.com" (public {
           regex = "^/((third_party|ajax|client_area|pdf)/.*|[a-zA-Z0-9]{8})$";
         }))
diff --git a/web/int/index.html b/web/int/index.html
index b611a9cb5f..bccc445051 100644
--- a/web/int/index.html
+++ b/web/int/index.html
@@ -17,6 +17,7 @@ SPDX-License-Identifier: Apache-2.0
 			<li><a href="https://deluge.int.lukegb.com">deluge</a></li>
 			<li><a href="https://prometheus.int.lukegb.com">prometheus</a></li>
 			<li><a href="https://grafana.int.lukegb.com">grafana</a></li>
+			<li><a href="https://unifi.int.lukegb.com">unifi</a></li>
 			<li><a href="https://invoices.lukegb.com">invoices</a></li>
 		</ul>
 		<!-- TODO(lukegb): pick a better redirect URI -->