diff --git a/ops/nixos/etheroute-lon01/default.nix b/ops/nixos/etheroute-lon01/default.nix
index 8aad190900..a74596ff40 100644
--- a/ops/nixos/etheroute-lon01/default.nix
+++ b/ops/nixos/etheroute-lon01/default.nix
@@ -247,7 +247,11 @@ in {
         })
         (service "bvm-twitterchiver:8080" "twitterchiver.int.lukegb.com" {})
         (service "bvm-twitterchiver:8080" "twitterchiver.lukegb.com" {})
-        (service "bvm-nixosmgmt:4440" "rundeck.int.lukegb.com" {})
+        (service "bvm-nixosmgmt:4440" "rundeck.int.lukegb.com" {
+          set_request_headers = {
+            "X-Forwarded-Roles" = "pomerium";
+          };
+        })
       ];
     };
   };