diff --git a/argocd/manifests/grafana/values.yaml b/argocd/manifests/grafana/values.yaml
index 976ed5c..3cb4c80 100644
--- a/argocd/manifests/grafana/values.yaml
+++ b/argocd/manifests/grafana/values.yaml
@@ -30,10 +30,12 @@ grafana.ini:
     allow_embedding: true
     # Required for iframe session cookies
     cookie_samesite: lax
-  # Public dashboards - selectively share specific dashboards without auth
-  # Enable per-dashboard via Share > Public Dashboard in Grafana UI
-  public_dashboards:
+  auth.anonymous:
+    # WARNING: All dashboards readable without login
+    # Security relies on Tailscale ACLs - only tailnet members can reach Grafana
+    # Required for iframe embeds with template variables and non-Prometheus datasources
     enabled: true
+    org_role: Viewer
   analytics:
     check_for_updates: false
     reporting_enabled: false