diff --git a/nix/module-eval/core-toggle.nix b/nix/module-eval/core-toggle.nix
index ac342de9..990c5952 100644
--- a/nix/module-eval/core-toggle.nix
+++ b/nix/module-eval/core-toggle.nix
@@ -630,7 +630,11 @@ let
             "= /__hive_agent_unreachable"
             "= /__hive_authelia"
             "= /api/docs"
+            "= /api/whoami"
           ]
+        # The profile menu's name comes from authelia's user info, on this
+        # origin so the session cookie reaches it.
+        && lib.hasSuffix "/api/user/info" dash.locations."= /api/whoami".proxyPass
         && sameListen hive
         && sameCert "h1.t.local" hive
         && hive.addSSL