diff --git a/apps/pangolin/pangolin-config.yaml b/apps/pangolin/pangolin-config.yaml
index 11dd954..5758f0e 100644
--- a/apps/pangolin/pangolin-config.yaml
+++ b/apps/pangolin/pangolin-config.yaml
@@ -24,6 +24,12 @@ data:
 
     server:
       secret: "REPLACE_WITH_SECRET_FROM_SEALED_SECRET"
+      # DEV-457: Traefik runs in kube-system; the short hostname "pangolin"
+      # (Pangolin's default) doesn't resolve there. Point badger + internal
+      # callbacks at the FQDN so the badger middleware can call back to the
+      # Pangolin API.
+      internal_hostname: "pangolin.pangolin.svc.cluster.local"
+      badger_override: "http://pangolin.pangolin.svc.cluster.local:3001/api/v1"
       cors:
         origins:
           - "https://pangolin.basicstack.de"