diff --git a/k8s/bootstrap/ingress/ingress.yaml b/k8s/bootstrap/ingress/ingress.yaml
index a818f31..af0725c 100644
--- a/k8s/bootstrap/ingress/ingress.yaml
+++ b/k8s/bootstrap/ingress/ingress.yaml
@@ -327,11 +327,19 @@ spec:
 ---
 # ── Obsidian UI (Poimen vault browser) ────────────────────────────────────────
 # Full Obsidian Desktop in browser via noVNC (obsidian-remote)
+# Needs websocket support for noVNC canvas rendering
 apiVersion: networking.k8s.io/v1
 kind: Ingress
 metadata:
   name: obsidian
   namespace: poimen
+  annotations:
+    nginx.ingress.kubernetes.io/proxy-read-timeout: "3600"
+    nginx.ingress.kubernetes.io/proxy-send-timeout: "3600"
+    nginx.ingress.kubernetes.io/proxy-http-version: "1.1"
+    nginx.ingress.kubernetes.io/configuration-snippet: |
+      proxy_set_header Upgrade $http_upgrade;
+      proxy_set_header Connection "upgrade";
 spec:
   ingressClassName: nginx
   rules: