diff --git a/config/providers_oauth2/grafana.yaml b/config/providers_oauth2/grafana.yaml
index 307d2f8..dd19f4a 100644
--- a/config/providers_oauth2/grafana.yaml
+++ b/config/providers_oauth2/grafana.yaml
@@ -1,5 +1,5 @@
 # OAuth2/OIDC provider + application for the in-cluster Grafana
-# (grafana.k8s.syd1.au.unkin.net). client_secret is read from Vault, not committed.
+# (grafana.unkin.net). client_secret is read from Vault, not committed.
 name: Grafana
 authorization_flow: default-provider-authorization-implicit-consent
 invalidation_flow: default-provider-invalidation-flow
@@ -13,5 +13,7 @@ scope_mappings:
   - goauthentik.io/providers/oauth2/scope-email
   - goauthentik.io/providers/oauth2/scope-profile
 redirect_uris:
+  - matching_mode: strict
+    url: https://grafana.unkin.net/login/generic_oauth
   - matching_mode: strict
     url: https://grafana.k8s.syd1.au.unkin.net/login/generic_oauth