diff --git a/nas/ingress.yaml b/nas/ingress.yaml
index 5fe5476..158444c 100644
--- a/nas/ingress.yaml
+++ b/nas/ingress.yaml
@@ -5,7 +5,7 @@ metadata:
   annotations:
     # nginx.ingress.kubernetes.io/rewrite-target: /
     cert-manager.io/cluster-issuer: prod-cluster-issuer
-    # nginx.ingress.kubernetes.io/ssl-passthrough: "false"
+    nginx.ingress.kubernetes.io/ssl-passthrough: "false"
     # nginx.ingress.kubernetes.io/enable-cors: "true"
     # type of authentication
     # nginx.ingress.kubernetes.io/auth-type: basic
@@ -19,7 +19,7 @@ metadata:
     # If you encounter a redirect loop or are getting a 307 response code
     # then you need to force the nginx ingress to connect to the backend using HTTPS.
     #
-    nginx.ingress.kubernetes.io/backend-protocol: "HTTPS"
+    nginx.ingress.kubernetes.io/backend-protocol: "HTTP"
   # namespace: ente-photos
 spec:
   ingressClassName: nginx