diff --git a/apps-gx10/fc-php/deployment-php-waf.json b/apps-gx10/fc-php/deployment-php-waf.json
index 8d9ebc0..2055ab3 100644
--- a/apps-gx10/fc-php/deployment-php-waf.json
+++ b/apps-gx10/fc-php/deployment-php-waf.json
@@ -101,6 +101,12 @@
             "livenessProbe": {
               "failureThreshold": 3,
               "httpGet": {
+                "httpHeaders": [
+                  {
+                    "name": "Host",
+                    "value": "php.iamworkin.lan"
+                  }
+                ],
                 "path": "/healthz",
                 "port": 8080,
                 "scheme": "HTTP"
@@ -121,6 +127,12 @@
             "readinessProbe": {
               "failureThreshold": 3,
               "httpGet": {
+                "httpHeaders": [
+                  {
+                    "name": "Host",
+                    "value": "php.iamworkin.lan"
+                  }
+                ],
                 "path": "/healthz",
                 "port": 8080,
                 "scheme": "HTTP"
diff --git a/tests/bluejay-infra-lint/FleetManifestLintTests.cs b/tests/bluejay-infra-lint/FleetManifestLintTests.cs
index aae2a93..e687b7a 100644
--- a/tests/bluejay-infra-lint/FleetManifestLintTests.cs
+++ b/tests/bluejay-infra-lint/FleetManifestLintTests.cs
@@ -1037,6 +1037,20 @@ public sealed class FleetManifestLintTests
         podSpec.GetProperty("enableServiceLinks").GetBoolean().Should().BeFalse();
         podSpec.GetProperty("securityContext").GetProperty("runAsUser").GetInt32().Should().Be(101);
         podSpec.GetProperty("securityContext").GetProperty("runAsNonRoot").GetBoolean().Should().BeTrue();
+        wafContainer.GetProperty("livenessProbe")
+            .GetProperty("httpGet")
+            .GetProperty("httpHeaders")[0]
+            .GetProperty("value")
+            .GetString()
+            .Should()
+            .Be("php.iamworkin.lan");
+        wafContainer.GetProperty("readinessProbe")
+            .GetProperty("httpGet")
+            .GetProperty("httpHeaders")[0]
+            .GetProperty("value")
+            .GetString()
+            .Should()
+            .Be("php.iamworkin.lan");
 
         using var service = JsonDocument.Parse(File.ReadAllText(Path.Combine(appRoot, "service-php-waf.json")));
         service.RootElement.GetProperty("spec").GetProperty("selector").GetProperty("app.kubernetes.io/name").GetString().Should().Be("php-waf");