diff --git a/manifest/overlays/production/ops-safe-vmcp-ingress.yaml b/manifest/overlays/production/ops-safe-vmcp-ingress.yaml
index 4622c1b..2831097 100644
--- a/manifest/overlays/production/ops-safe-vmcp-ingress.yaml
+++ b/manifest/overlays/production/ops-safe-vmcp-ingress.yaml
@@ -5,6 +5,10 @@ metadata:
   namespace: toolhive-system
   labels:
     app.kubernetes.io/name: ops-safe-vmcp
+  annotations:
+    dns.public: 'true'
+    dns.public.access.policy: bypass
+    dns.public.hostname: ops-safe.olb42.com
 spec:
   entryPoints:
     - websecure