diff --git a/manifest-template.yaml b/manifest-template.yaml
index 8c4f897..9795f76 100644
--- a/manifest-template.yaml
+++ b/manifest-template.yaml
@@ -220,8 +220,8 @@ metadata:
     nginx.ingress.kubernetes.io/proxy-read-timeout: "600"
     nginx.ingress.kubernetes.io/proxy-send-timeout: "600"
     # Optional: Enable authentication
-    nginx.ingress.kubernetes.io/auth-url: "https://pass.junv.cc/auth"
-    nginx.ingress.kubernetes.io/auth-signin: "https://pass.junv.cc/?redirect=https%3A%2F%2F$host$request_uri"
+    nginx.ingress.kubernetes.io/auth-url: "https://pass.junv.cc/oauth2/auth"
+    nginx.ingress.kubernetes.io/auth-signin: "https://pass.junv.cc/oauth2/start?rd=$escaped_request_uri"
 spec:
   ingressClassName: nginx
   tls: