diff --git a/argo/ingress.yaml b/argo/ingress.yaml
index a48fc2c..293fded 100644
--- a/argo/ingress.yaml
+++ b/argo/ingress.yaml
@@ -7,8 +7,9 @@ metadata:
   annotations:
     kubernetes.io/ingress.class: "nginx"
     cert-manager.io/cluster-issuer: letsencrypt-prod
-    acme.cert-manager.io/http01-edit-in-place: "true"
+    acme.cert-manager.io/http01-edit-in-place: "false"
     ingress.kubernetes.io/ssl-redirect: "false"
+    nginx.org/ssl-services: "argocd-server"
 spec:
   rules:
   - host: "argo.apps.yolokube.de"
diff --git a/examples/example-deployment.yaml b/examples/example-deployment.yaml
index c6ff938..4598ab5 100644
--- a/examples/example-deployment.yaml
+++ b/examples/example-deployment.yaml
@@ -72,6 +72,8 @@ metadata:
     cert-manager.io/cluster-issuer: letsencrypt-prod
     acme.cert-manager.io/http01-edit-in-place: "true"
     ingress.kubernetes.io/ssl-redirect: "false"
+    # Use the following annotation if the backend only speaks HTTPS (fill out the service name accordingly):
+    #nginx.org/ssl-services: "example-service"
 spec:
   rules:
   - host: "example.apps.yolokube.de"