diff --git a/hosts/aluminium/services/unifi-controller.nix b/hosts/aluminium/services/unifi-controller.nix
index 3442337..a97eda8 100644
--- a/hosts/aluminium/services/unifi-controller.nix
+++ b/hosts/aluminium/services/unifi-controller.nix
@@ -6,7 +6,7 @@ in
 {
   services.unifi = {
     enable = true;
-    unifiPackage = pkgs.unifi;
+    unifiPackage = pkgs.unifi8;
   };
   networking.firewall.interfaces.lechner.allowedTCPPorts = [
     ports.unifi.tcp
diff --git a/hosts/iron/ports.nix b/hosts/iron/ports.nix
index a01a8b8..6b38336 100644
--- a/hosts/iron/ports.nix
+++ b/hosts/iron/ports.nix
@@ -18,6 +18,7 @@ custom-utils.validatePortAttrset {
   qbittorrent-webui.tcp = 8099;
   radicale.tcp = 5232;
   rmfakecloud.tcp = 3000;
-  unifi.tcp = 8443;
+  unifi-http.tcp = 8080;
+  unifi-https.tcp = 8443;
   wireguard-public-ip-tunnel.udp = 51000;
 }
diff --git a/hosts/iron/services/unifi-controller.nix b/hosts/iron/services/unifi-controller.nix
index b5e4cac..bb5417f 100644
--- a/hosts/iron/services/unifi-controller.nix
+++ b/hosts/iron/services/unifi-controller.nix
@@ -6,9 +6,10 @@ in
 {
   services.unifi = {
     enable = true;
-    unifiPackage = pkgs.unifi;
+    unifiPackage = pkgs.unifi8;
   };
   networking.firewall.interfaces.enp2s4.allowedTCPPorts = [
-    ports.unifi.tcp
+    ports.unifi-http.tcp
+    ports.unifi-https.tcp
   ];
 }