diff --git a/nas/ingress.yaml b/nas/ingress.yaml
index debb592..65c71f7 100644
--- a/nas/ingress.yaml
+++ b/nas/ingress.yaml
@@ -5,7 +5,7 @@ metadata:
   annotations:
     # nginx.ingress.kubernetes.io/rewrite-target: /
     cert-manager.io/cluster-issuer: prod-cluster-issuer
-    nginx.ingress.kubernetes.io/ssl-passthrough: "true"
+    nginx.ingress.kubernetes.io/ssl-passthrough: "false"
     # nginx.ingress.kubernetes.io/enable-cors: "true"
     # type of authentication
     # nginx.ingress.kubernetes.io/auth-type: basic
@@ -19,7 +19,7 @@ metadata:
     # If you encounter a redirect loop or are getting a 307 response code
     # then you need to force the nginx ingress to connect to the backend using HTTPS.
     #
-    nginx.ingress.kubernetes.io/backend-protocol: "HTTPS"
+    nginx.ingress.kubernetes.io/backend-protocol: "HTTP"
   # namespace: ente-photos
 spec:
   ingressClassName: nginx
@@ -33,7 +33,7 @@ spec:
           service:
             name: nas-external
             port: 
-              number: 5001
+              number: 5000
             
   # TLS configuration for HTTPS
   tls:
diff --git a/nas/service.yaml b/nas/service.yaml
index 428f742..6344c26 100644
--- a/nas/service.yaml
+++ b/nas/service.yaml
@@ -6,5 +6,5 @@ spec:
   type: ExternalName
   externalName: 192.168.1.99
   ports:
-    - port: 5001
+    - port: 5000
       protocol: TCP
\ No newline at end of file