diff --git a/app-of-apps/headscale.yaml b/app-of-apps/headscale.yaml
index be0822a..5b8bac7 100644
--- a/app-of-apps/headscale.yaml
+++ b/app-of-apps/headscale.yaml
@@ -17,7 +17,7 @@ spec:
         - name: certmanager.dnsNames[0]
           value: headscale.martyn.berlin
         - name: certmanager.enabled
-          value: 'true'
+          value: 'false'
         - name: certmanager.issuerRef.name
           value: 'dnsimple-cert-manager-webhook-cert-manager-webhook-dnsimple-production'
         - name: headscale.certmanager.issuerRef.name
@@ -26,12 +26,15 @@ spec:
           value: 'hs.martyn.berlin'
         - name: headscale.config.server_url
           value: 'https://headscale.martyn.berlin'
+        - name: headscale.tls_cert_path
+          value: ""
+        - name: headscale.tls_key_path
+          value: ""
         - name: headscale.certmanager.dnsNames[0]
           value: headscale.martyn.berlin
       valuesObject:
         ingress:
           annotations:
-            nginx.ingress.kubernetes.io/backend-protocol: "HTTPS"
             external-dns.alpha.kubernetes.io/target: home.martyn.berlin
           enabled: true
           className: nginx