diff --git a/charts/base-cluster/templates/ingress/nginx.yaml b/charts/base-cluster/templates/ingress/nginx.yaml
index 2c7630d42..627bc8141 100644
--- a/charts/base-cluster/templates/ingress/nginx.yaml
+++ b/charts/base-cluster/templates/ingress/nginx.yaml
@@ -17,6 +17,7 @@ spec:
   {{- end }}
   values:
     controller:
+      allowSnippetAnnotations: {{ .Values.ingress.snippets }}
       priorityClassName: system-cluster-critical
       watchIngressWithoutClass: true
       metrics:
diff --git a/charts/base-cluster/values.schema.json b/charts/base-cluster/values.schema.json
index 81ac19f9b..0c77ac71c 100644
--- a/charts/base-cluster/values.schema.json
+++ b/charts/base-cluster/values.schema.json
@@ -930,9 +930,11 @@
           "$ref": "#/$defs/resourceRequirements"
         },
         "enabled": {
-          "type": [
-            "boolean"
-          ]
+          "type": "boolean"
+        },
+        "allowNginxConfigurationSnippets": {
+          "type": "boolean",
+          "description": "Please don't do it if not absolutely necessary, it goes against all best practices. Ref.: https://docs.nginx.com/nginx-ingress-controller/configuration/global-configuration/command-line-arguments#cmdoption-enable-snippets"
         },
         "IP": {
           "type": [
diff --git a/charts/base-cluster/values.yaml b/charts/base-cluster/values.yaml
index 9dd5691aa..74f8712e6 100644
--- a/charts/base-cluster/values.yaml
+++ b/charts/base-cluster/values.yaml
@@ -366,6 +366,7 @@ flux:
 
 ingress:
   enabled: true
+  allowNginxConfigurationSnippets: false
   replicas: 2
   resources:
     requests: