diff --git a/k8s/bootstrap/ingress/ingress.yaml b/k8s/bootstrap/ingress/ingress.yaml
index abbe163..cdadc37 100644
--- a/k8s/bootstrap/ingress/ingress.yaml
+++ b/k8s/bootstrap/ingress/ingress.yaml
@@ -326,11 +326,15 @@ spec:
 
 ---
 # ── Obsidian (Poimen vault UI) ────────────────────────────────────────────────
+# Obsidian REST API serves HTTPS on port 27124 (self-signed)
 apiVersion: networking.k8s.io/v1
 kind: Ingress
 metadata:
   name: obsidian
   namespace: poimen
+  annotations:
+    nginx.ingress.kubernetes.io/backend-protocol: "HTTPS"
+    nginx.ingress.kubernetes.io/proxy-ssl-verify: "off"
 spec:
   ingressClassName: nginx
   rules: