From 56be73ad3aea81414429e9a5dbd71b765142eeb9 Mon Sep 17 00:00:00 2001
From: rock <locartrock@gmail.com>
Date: Fri, 28 Aug 2026 16:48:43 -0700
Subject: [PATCH] fix: obsidian ingress needs backend-protocol HTTPS
 (self-signed)

---
 k8s/bootstrap/ingress/ingress.yaml | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/k8s/bootstrap/ingress/ingress.yaml b/k8s/bootstrap/ingress/ingress.yaml
index abbe163..cdadc37 100644
--- a/k8s/bootstrap/ingress/ingress.yaml
+++ b/k8s/bootstrap/ingress/ingress.yaml
@@ -326,11 +326,15 @@ spec:
 
 ---
 # ── Obsidian (Poimen vault UI) ────────────────────────────────────────────────
+# Obsidian REST API serves HTTPS on port 27124 (self-signed)
 apiVersion: networking.k8s.io/v1
 kind: Ingress
 metadata:
   name: obsidian
   namespace: poimen
+  annotations:
+    nginx.ingress.kubernetes.io/backend-protocol: "HTTPS"
+    nginx.ingress.kubernetes.io/proxy-ssl-verify: "off"
 spec:
   ingressClassName: nginx
   rules: