diff --git a/machines/storage/s0/default.nix b/machines/storage/s0/default.nix
index ecfde0c..2599ca6 100644
--- a/machines/storage/s0/default.nix
+++ b/machines/storage/s0/default.nix
@@ -218,6 +218,7 @@
     4534
     8097
     9091
+    8443 # unifi
   ];
 
   virtualisation.oci-containers.backend = "podman";
@@ -227,5 +228,11 @@
     configFile = ./dashy.yaml;
   };
 
+  services.unifi = {
+    enable = true;
+    openFirewall = true;
+    unifiPackage = pkgs.unifi8;
+  };
+
   boot.binfmt.emulatedSystems = [ "aarch64-linux" "armv7l-linux" ];
 }
diff --git a/overlays/default.nix b/overlays/default.nix
index 29959ce..ea4684d 100644
--- a/overlays/default.nix
+++ b/overlays/default.nix
@@ -12,4 +12,11 @@ in
   frigate = frigatePkgs.frigate;
 
   actual-server = prev.callPackage ./actualbudget { };
+  unifi8 = prev.unifi.overrideAttrs (oldAttrs: rec {
+    version = "8.1.113";
+    src = prev.fetchurl {
+      url = "https://dl.ui.com/unifi/8.1.113/unifi_sysvinit_all.deb";
+      sha256 = "1knm+l8MSb7XKq2WIbehAnz7loRPjgnc+R98zpWKEAE=";
+    };
+  });
 }