diff --git a/kube/deploy/core/ingress/external-proxy-x/app/hr.yaml b/kube/deploy/core/ingress/external-proxy-x/app/hr.yaml
index 105dc5d4..ae4076db 100644
--- a/kube/deploy/core/ingress/external-proxy-x/app/hr.yaml
+++ b/kube/deploy/core/ingress/external-proxy-x/app/hr.yaml
@@ -106,7 +106,7 @@ spec:
         acl immich-share-ref req.hdr(Referer) -m beg https://${APP_DNS_IMMICH}/share/ # weak but better than nothing
         acl immich-api-asset path_beg /api/asset/
         acl immich-api-asset path_beg /api/download/asset/
-        acl immich-api-asset path_beg /api/timeline/buckets/
+        acl immich-api-asset path /api/timeline/buckets
         acl immich-share-cookie req.cook(immich_shared_link_token) -m found
         use_backend immich if immich-fqdn immich-path
         use_backend immich if immich-fqdn immich-api-share immich-key immich-share-ref