diff --git a/clusters/base/apps/dev/ingress.yaml b/clusters/base/apps/dev/ingress.yaml
index 9c23717..d75455b 100644
--- a/clusters/base/apps/dev/ingress.yaml
+++ b/clusters/base/apps/dev/ingress.yaml
@@ -4,8 +4,8 @@
 # explicit - by default Traefik orders routers by rule length, which would
 # not reliably put /api/admin above /api/.
 #   300 dev-admin  /api/admin  -> Authelia -> api (prefix /api stripped)
-#   200 dev-public /api/ /m/   -> api / m, public (prefixes stripped)
-#   100 dev        /           -> Authelia -> ui (also bare /api and /m)
+#   200 dev-public /api/ /m /m/ -> api / m, public (prefixes stripped)
+#   100 dev        /           -> Authelia -> ui (also bare /api)
 # All carry the tls section (otherwise the router is http-only), but only
 # "dev" has the cert-manager annotation so a single Certificate owns dev-tls.
 apiVersion: networking.k8s.io/v1
@@ -84,6 +84,13 @@ spec:
                 name: dev
                 port:
                   name: api
+          - path: /m
+            pathType: Exact
+            backend:
+              service:
+                name: dev
+                port:
+                  name: m
           - path: /m/
             pathType: Prefix
             backend: