diff --git a/apps/oauth2-proxy/values.yaml b/apps/oauth2-proxy/values.yaml
index 4219221..bc91ee7 100644
--- a/apps/oauth2-proxy/values.yaml
+++ b/apps/oauth2-proxy/values.yaml
@@ -9,7 +9,6 @@ oauth2-proxy:
       email_domains = [ "*" ]
       upstreams = [ "file:///dev/null" ]
       github_users = "amkartashov"
-      proxy_prefix = "/"
       whitelist_domains = ".ioot.xyz"
       cookie_refresh = "1m"
       cookie_expire = "30m"
diff --git a/apps/system/cilium/values.yaml b/apps/system/cilium/values.yaml
index c4dae7b..98afdf9 100644
--- a/apps/system/cilium/values.yaml
+++ b/apps/system/cilium/values.yaml
@@ -17,8 +17,8 @@ cilium:
           kubernetes.io/ingress.class: nginx
           kubernetes.io/tls-acme: "true"
           cert-manager.io/cluster-issuer: letsencrypt
-          nginx.ingress.kubernetes.io/auth-url: "https://oauth2.ioot.xyz/auth"
-          nginx.ingress.kubernetes.io/auth-signin: "https://oauth2.ioot.xyz/start?rd=$escaped_request_uri"
+          nginx.ingress.kubernetes.io/auth-url: "https://oauth2.ioot.xyz/oauth2/auth"
+          nginx.ingress.kubernetes.io/auth-signin: "https://oauth2.ioot.xyz/oauth2/start?rd=$escaped_request_uri"
           nginx.ingress.kubernetes.io/auth-response-headers: "x-auth-request-user, x-auth-request-email, x-auth-request-access-token"
         hosts:
           - hubble.ioot.xyz