diff --git a/infrastructure/rook-ceph/cluster-values.yaml b/infrastructure/rook-ceph/cluster-values.yaml
index 317df38..3bfcdd0 100644
--- a/infrastructure/rook-ceph/cluster-values.yaml
+++ b/infrastructure/rook-ceph/cluster-values.yaml
@@ -62,8 +62,8 @@ cephClusterSpec:
   # Dashboard configuration
   dashboard:
     enabled: true
-    ssl: false  # TLS handled by ingress
-    port: 7000
+    ssl: true
+    port: 8443
 
   # Network configuration
   network:
diff --git a/infrastructure/rook-ceph/manifests/envoy-backend.yaml b/infrastructure/rook-ceph/manifests/envoy-backend.yaml
index e37dd50..6d05791 100644
--- a/infrastructure/rook-ceph/manifests/envoy-backend.yaml
+++ b/infrastructure/rook-ceph/manifests/envoy-backend.yaml
@@ -7,4 +7,7 @@ spec:
   endpoints:
     - fqdn:
         hostname: rook-ceph-mgr-dashboard.rook-ceph.svc.cluster.local
-        port: 7000
+        port: 8443
+  tls:
+    insecureSkipVerify: true
+    sni: rook-ceph-mgr-dashboard.rook-ceph.svc.cluster.local
diff --git a/infrastructure/rook-ceph/manifests/envoy-route.yaml b/infrastructure/rook-ceph/manifests/envoy-route.yaml
index 4698ec2..5796c35 100644
--- a/infrastructure/rook-ceph/manifests/envoy-route.yaml
+++ b/infrastructure/rook-ceph/manifests/envoy-route.yaml
@@ -17,12 +17,6 @@ spec:
         - path:
             type: PathPrefix
             value: /
-      filters:
-        - type: RequestHeaderModifier
-          requestHeaderModifier:
-            set:
-              - name: X-Forwarded-Proto
-                value: https
       backendRefs:
         - group: gateway.envoyproxy.io
           kind: Backend
diff --git a/infrastructure/rook-ceph/manifests/istio-destinationrule.yaml b/infrastructure/rook-ceph/manifests/istio-destinationrule.yaml
index 6f8546c..5a233be 100644
--- a/infrastructure/rook-ceph/manifests/istio-destinationrule.yaml
+++ b/infrastructure/rook-ceph/manifests/istio-destinationrule.yaml
@@ -7,4 +7,6 @@ spec:
   host: rook-ceph-mgr-dashboard.rook-ceph.svc.cluster.local
   trafficPolicy:
     tls:
-      mode: DISABLE
+      mode: SIMPLE
+      sni: rook-ceph-mgr-dashboard.rook-ceph.svc.cluster.local
+      insecureSkipVerify: true
diff --git a/infrastructure/rook-ceph/manifests/istio-virtualservice.yaml b/infrastructure/rook-ceph/manifests/istio-virtualservice.yaml
index 2079b62..765179a 100644
--- a/infrastructure/rook-ceph/manifests/istio-virtualservice.yaml
+++ b/infrastructure/rook-ceph/manifests/istio-virtualservice.yaml
@@ -9,13 +9,9 @@ spec:
   gateways:
     - istio-system/edge
   http:
-    - headers:
-        request:
-          set:
-            x-forwarded-proto: https
-      timeout: 3600s
+    - timeout: 3600s
       route:
         - destination:
             host: rook-ceph-mgr-dashboard.rook-ceph.svc.cluster.local
             port:
-              number: 7000
+              number: 8443