diff --git a/k8s/manifest.yaml b/k8s/manifest.yaml
index 99cbdec..28d720b 100644
--- a/k8s/manifest.yaml
+++ b/k8s/manifest.yaml
@@ -112,6 +112,11 @@ metadata:
     cert-manager.io/cluster-issuer: "letsencrypt-prod"
     nginx.ingress.kubernetes.io/auth-url: "https://id.junv.cc/oauth2/auth"
     nginx.ingress.kubernetes.io/auth-signin: "https://id.junv.cc/oauth2/start?rd=https%3A%2F%2F$host$request_uri"
+    # Skip authentication for /public
+    nginx.ingress.kubernetes.io/auth-snippet: |
+      if ($request_uri ~ "/public") {
+        return 200;
+      }
 spec:
   tls:
     - hosts:
@@ -139,7 +144,6 @@ spec:
                 name: links
                 port:
                   number: 80
-
 ---
 
 apiVersion: networking.k8s.io/v1