diff --git a/apps/dozzle/deployment.yaml b/apps/dozzle/deployment.yaml
index 737d098..463de04 100644
--- a/apps/dozzle/deployment.yaml
+++ b/apps/dozzle/deployment.yaml
@@ -71,6 +71,9 @@ spec:
         - --code-challenge-method=S256
         - --proxy-websockets=true
         - --pass-host-header=true
+        - --flush-interval=1s
+        - --upstream-timeout=30s
+        - --proxy-buffer-size=8k
         env:
         - name: OAUTH2_PROXY_CLIENT_ID
           valueFrom:
diff --git a/apps/dozzle/ingress.yaml b/apps/dozzle/ingress.yaml
index b6602c4..cbcde93 100644
--- a/apps/dozzle/ingress.yaml
+++ b/apps/dozzle/ingress.yaml
@@ -5,12 +5,8 @@ metadata:
   namespace: dozzle
   annotations:
     cert-manager.io/cluster-issuer: letsencrypt-prod
-    traefik.ingress.kubernetes.io/router.entrypoints: web,websecure
-    traefik.ingress.kubernetes.io/preserve-host: "true"
-    # WebSocket support for real-time log streaming
-    ingress.kubernetes.io/protocol: http
-    ingress.kubernetes.io/connection-timeout: "3600"
-    traefik.ingress.kubernetes.io/websocket: "true"
+    traefik.ingress.kubernetes.io/router.entrypoints: websecure
+    traefik.ingress.kubernetes.io/router.tls: "true"
 spec:
   ingressClassName: traefik
   rules: