diff --git a/goldilocks/values-home.yaml b/goldilocks/values-home.yaml
index 82ede06..969d8d1 100644
--- a/goldilocks/values-home.yaml
+++ b/goldilocks/values-home.yaml
@@ -143,9 +143,12 @@ dashboard:
 
     # dashboard.ingress.ingressClassName -- From Kubernetes 1.18+ this field is supported in case your ingress controller supports it. When set, you do not need to add the ingress class as annotation.
     ingressClassName:
-    annotations: {}
+    annotations:
       # kubernetes.io/ingress.class: nginx
       # kubernetes.io/tls-acme: "true"
+      nginx.ingress.kubernetes.io/auth-signin: https://$host/oauth2/start?rd=$escaped_request_uri
+      nginx.ingress.kubernetes.io/auth-url: https://$host/oauth2/auth
+      nginx.ingress.kubernetes.io/backend-protocol: HTTP
     hosts:
       - host: goldilocks.ervine.cloud
         paths:
diff --git a/oauth2-proxy/values-goldilocks.yaml b/oauth2-proxy/values-goldilocks.yaml
index d709c8d..7b07937 100644
--- a/oauth2-proxy/values-goldilocks.yaml
+++ b/oauth2-proxy/values-goldilocks.yaml
@@ -145,7 +145,7 @@ serviceAccount:
 ingress:
   enabled: true
   # className: nginx
-  path: /
+  path: /oauth2
   # Only used if API capabilities (networking.k8s.io/v1) allow it
   pathType: ImplementationSpecific
   # Used to create an Ingress record.