diff --git a/clusters/cherry/apps/ingress-nginx.yaml b/clusters/cherry/apps/ingress-nginx.yaml
index 560333b..2a9fce1 100644
--- a/clusters/cherry/apps/ingress-nginx.yaml
+++ b/clusters/cherry/apps/ingress-nginx.yaml
@@ -23,7 +23,6 @@ spec:
       valuesObject:
         ingressClassResource:
           default: true
-        # TODO: enable proxy protocol
         controller:
           kind: DaemonSet
           updateStrategy:
@@ -31,10 +30,11 @@ spec:
             rollingUpdate:
               maxUnavailable: 1
           service:
-            # TODO: use Service .spec.type: NodePort
-            type: ClusterIP
-          hostPort:
-            enabled: true
+            type: NodePort
+            nodePorts:
+              http: 32080
+              https: 32443
           config:
             allow-snippet-annotations: "true"
             generate-request-id: "true"
+            use-proxy-protocol: "true"