diff --git a/cluster/platform/argocd/argocd-server-patch.yaml b/cluster/platform/argocd/argocd-server-patch.yaml
index 052ac51..8d9c829 100644
--- a/cluster/platform/argocd/argocd-server-patch.yaml
+++ b/cluster/platform/argocd/argocd-server-patch.yaml
@@ -1,6 +1,8 @@
 # ------------------------------------------------------------------------------
 # ArgoCD Server — Insecure Mode
-# Enables --insecure flag so TLS is terminated at the Gateway, not argocd-server
+# Enables insecure mode via environment variable so TLS is terminated
+# at the Gateway, not at argocd-server itself.
+# Using env var instead of args to avoid tini entrypoint conflict.
 # ------------------------------------------------------------------------------
 apiVersion: apps/v1
 kind: Deployment
@@ -12,5 +14,6 @@ spec:
     spec:
       containers:
         - name: argocd-server
-          args:
-            - --insecure
+          env:
+            - name: ARGOCD_SERVER_INSECURE
+              value: "true"