diff --git a/servers/legion/k8s/fornax/coordinator/deployment.yaml b/servers/legion/k8s/fornax/coordinator/deployment.yaml
index 524be8b..74cd05f 100644
--- a/servers/legion/k8s/fornax/coordinator/deployment.yaml
+++ b/servers/legion/k8s/fornax/coordinator/deployment.yaml
@@ -13,7 +13,7 @@ spec:
   template:
     metadata:
       annotations:
-        kubectl.kubernetes.io/restartedAt: "2026-04-14T19:30:00Z"
+        kubectl.kubernetes.io/restartedAt: "2026-04-14T20:15:00Z"
       labels:
         app: fornax-coordinator
     spec:
diff --git a/servers/legion/k8s/fornax/coordinator/ingress.yaml b/servers/legion/k8s/fornax/coordinator/ingress.yaml
index c707da1..b22f2b9 100644
--- a/servers/legion/k8s/fornax/coordinator/ingress.yaml
+++ b/servers/legion/k8s/fornax/coordinator/ingress.yaml
@@ -16,7 +16,16 @@ spec:
     - host: fornax.neuralplatform.ai
       http:
         paths:
-          # API and health routes go to the Express backend
+          # /api/ui proxied through the UI nginx pod (which forwards internally,
+          # bypassing Cloudflare Access for browser fetch calls)
+          - path: /api/ui
+            pathType: Prefix
+            backend:
+              service:
+                name: fornax-ui
+                port:
+                  number: 80
+          # All other API and health routes go directly to the Express backend
           - path: /api
             pathType: Prefix
             backend:
diff --git a/servers/legion/k8s/fornax/ui/deployment.yaml b/servers/legion/k8s/fornax/ui/deployment.yaml
index ab21909..06ac5c8 100644
--- a/servers/legion/k8s/fornax/ui/deployment.yaml
+++ b/servers/legion/k8s/fornax/ui/deployment.yaml
@@ -13,7 +13,7 @@ spec:
   template:
     metadata:
       annotations:
-        kubectl.kubernetes.io/restartedAt: "2026-04-14T19:30:00Z"
+        kubectl.kubernetes.io/restartedAt: "2026-04-14T20:15:00Z"
       labels:
         app: fornax-ui
     spec: