diff --git a/apps/fc-signalcontrol/fc-signalcontrol.yaml b/apps/fc-signalcontrol/fc-signalcontrol.yaml
index 7e5a6de..7f8a97f 100644
--- a/apps/fc-signalcontrol/fc-signalcontrol.yaml
+++ b/apps/fc-signalcontrol/fc-signalcontrol.yaml
@@ -63,17 +63,18 @@ spec:
             limits:
               memory: "512Mi"
               cpu: "500m"
+          # Note: app's ApiKeyAuthenticationMiddleware blocks /health → 404. Until
+          # /health is moved before that middleware (or marked anonymous), use
+          # tcpSocket probes that just check the listener is accepting.
           livenessProbe:
-            httpGet:
-              path: /health
+            tcpSocket:
               port: 8080
-            initialDelaySeconds: 10
+            initialDelaySeconds: 30
             periodSeconds: 30
           readinessProbe:
-            httpGet:
-              path: /health
+            tcpSocket:
               port: 8080
-            initialDelaySeconds: 5
+            initialDelaySeconds: 10
             periodSeconds: 10
       volumes:
         - name: data