diff --git a/roles/baseline/defaults/main.yml b/roles/baseline/defaults/main.yml
index 5df47f33..141e02d7 100644
--- a/roles/baseline/defaults/main.yml
+++ b/roles/baseline/defaults/main.yml
@@ -61,6 +61,8 @@ INGRESS_NGINX_CONFIG:
       use-forwarded-headers: "false"
       hsts-max-age: "63072000"
       hide-headers: Server,X-Powered-By
+      annotations-risk-level: "Critical"
+      strict-validate-path-type: "false"
     tcp: {}
     udp: {}
     lifecycle: