diff --git a/manifests/passkey-auth.yaml b/manifests/passkey-auth.yaml
index f3f7b61..b26884f 100644
--- a/manifests/passkey-auth.yaml
+++ b/manifests/passkey-auth.yaml
@@ -20,6 +20,34 @@ spec:
           provider: sqlite
           connectionString: "file:data/pocket-id.db?_pragma=journal_mode(WAL)&_pragma=busy_timeout(2500)&_txlock=immediate"
 
+        # Probes with generous delays to prevent 503 on restart
+        startupProbe:
+          httpGet:
+            path: /healthz
+            port: http
+          initialDelaySeconds: 5
+          periodSeconds: 10
+          timeoutSeconds: 3
+          failureThreshold: 30
+
+        readinessProbe:
+          httpGet:
+            path: /healthz
+            port: http
+          initialDelaySeconds: 5
+          periodSeconds: 5
+          timeoutSeconds: 3
+          failureThreshold: 2
+
+        livenessProbe:
+          httpGet:
+            path: /healthz
+            port: http
+          initialDelaySeconds: 60
+          periodSeconds: 30
+          timeoutSeconds: 5
+          failureThreshold: 3
+
         pocketID:
           resources:
             limits: