diff --git a/charts/base-cluster/templates/ingress/nginx.yaml b/charts/base-cluster/templates/ingress/nginx.yaml
index 7e40331ff7..969a216bb5 100644
--- a/charts/base-cluster/templates/ingress/nginx.yaml
+++ b/charts/base-cluster/templates/ingress/nginx.yaml
@@ -40,6 +40,9 @@ spec:
         use-proxy-protocol: {{ .Values.ingress.useProxyProtocol }}
         use-gzip: true
         enable-brotli: true
+        {{- if .Values.ingress.allowNginxConfigurationSnippets }}
+        annotations-risk-level: Critical
+        {{- end }}
         enable-underscores-in-headers: true
         {{- if $telemetryConf.enabled }}
         enable-opentelemetry: true