diff --git a/k8s/manifest.yaml b/k8s/manifest.yaml
index 62e1145..f054cc1 100644
--- a/k8s/manifest.yaml
+++ b/k8s/manifest.yaml
@@ -166,10 +166,8 @@ metadata:
     kubernetes.io/tls-acme: "true"
     cert-manager.io/cluster-issuer: "letsencrypt-prod"
     nginx.ingress.kubernetes.io/proxy-body-size: 1024m
-    # nginx.ingress.kubernetes.io/auth-url: "https://id.junv.cc/oauth2/auth"
-    # nginx.ingress.kubernetes.io/auth-signin: "https://id.junv.cc/oauth2/start?rd=https%3A%2F%2F$host$request_uri"
     nginx.ingress.kubernetes.io/auth-url: "https://pass.junv.cc/oauth2/auth"
-    nginx.ingress.kubernetes.io/auth-signin: "https://pass.junv.cc/oauth2/start?rd=$escaped_request_uri"
+    nginx.ingress.kubernetes.io/auth-signin: "https://pass.junv.cc/oauth2/start?rd=https://$host$escaped_request_uri"
     # Skip authentication for /public, but looks like doesn't work
     # nginx.ingress.kubernetes.io/auth-snippet: |
     #   if ($request_uri ~ "/public") {