diff --git a/config/prod.exs b/config/prod.exs
index f3b7d33f..e039cd38 100644
--- a/config/prod.exs
+++ b/config/prod.exs
@@ -29,4 +29,9 @@ config :towerops, ToweropsWeb.Endpoint,
   cache_static_manifest: "priv/static/cache_manifest.json",
   # Force SSL redirects and enable HSTS (HTTP Strict Transport Security)
   # HSTS tells browsers to only use HTTPS for this domain for the next year
-  force_ssl: [hsts: true, rewrite_on: [:x_forwarded_host, :x_forwarded_port, :x_forwarded_proto]]
+  # Exclude /health endpoint from SSL redirect (used by K8s probes on internal network)
+  force_ssl: [
+    hsts: true,
+    rewrite_on: [:x_forwarded_host, :x_forwarded_port, :x_forwarded_proto],
+    exclude: ["health"]
+  ]