- Add initContainer to set proper file permissions (chown 1000:0) - Add fsGroup: 0 for root group permissions - Add ServersTransport for Traefik backend HTTPS with insecureSkipVerify - Add traefik.ingress.kubernetes.io/service.serversscheme annotation