diff --git a/k8s/app/obsidian.yaml b/k8s/app/obsidian.yaml
index 4037f90..0b96275 100644
--- a/k8s/app/obsidian.yaml
+++ b/k8s/app/obsidian.yaml
@@ -155,8 +155,9 @@ metadata:
   namespace: poimen
   annotations:
     cert-manager.io/cluster-issuer: letsencrypt-prod
-    nginx.ingress.kubernetes.io/auth-type: bearer
-    nginx.ingress.kubernetes.io/auth-url: http://authentik-server.iam.svc.cluster.local/application/o/oauth2/token/
+    # TODO: Add Authentik forward-auth once outpost is deployed
+    # nginx.ingress.kubernetes.io/auth-url: https://<outpost>/outpost.goauthentik.io/auth/nginx
+    # nginx.ingress.kubernetes.io/auth-signin: https://authentik.riotpiao.com/outpost.goauthentik.io/start?rd=$scheme://$host$request_uri
 spec:
   ingressClassName: nginx
   tls: