diff --git a/apps/system/nginx-ingress/values.yaml b/apps/system/nginx-ingress/values.yaml
index 43a4a5b..112bd23 100644
--- a/apps/system/nginx-ingress/values.yaml
+++ b/apps/system/nginx-ingress/values.yaml
@@ -5,6 +5,8 @@ nginx-ingress:
       service:
         omitClusterIP: true
     service:
+      # preserve source IPs
+      externalTrafficPolicy: Local
       omitClusterIP: true
       type: NodePort
       nodePorts: