diff --git a/modules/kubernetes/shadowsocks/main.tf b/modules/kubernetes/shadowsocks/main.tf
index cab1339b..fe5f0fed 100644
--- a/modules/kubernetes/shadowsocks/main.tf
+++ b/modules/kubernetes/shadowsocks/main.tf
@@ -6,6 +6,10 @@ variable "method" {
 resource "kubernetes_namespace" "mailserver" {
   metadata {
     name = "shadowsocks"
+    # TLS termination seems iffy - I get pfsense MiTM-ing
+    # labels = {
+    #   "istio-injection" : "enabled"
+    # }
   }
 }