diff --git a/infra/k3s/50-web.yaml b/infra/k3s/50-web.yaml
index 199f842..b9484a7 100644
--- a/infra/k3s/50-web.yaml
+++ b/infra/k3s/50-web.yaml
@@ -21,6 +21,26 @@ spec:
             - secretRef: { name: jitsi-secrets }
           ports:
             - { name: http, containerPort: 80 }
+          # interface_config.js is rendered from /defaults at container
+          # startup. The Jitsi-logo overlay in the video tile is controlled
+          # by SHOW_JITSI_WATERMARK which is hardcoded to `true` upstream
+          # and not exposed as an env var. Patch the rendered file via
+          # postStart — runs after startup-templating; nginx re-serves the
+          # file from disk on every request so any tiny race is fine.
+          lifecycle:
+            postStart:
+              exec:
+                command:
+                  - /bin/sh
+                  - -c
+                  - |
+                    for i in $(seq 1 30); do
+                      [ -f /config/interface_config.js ] && break
+                      sleep 1
+                    done
+                    sed -i 's/SHOW_JITSI_WATERMARK: true/SHOW_JITSI_WATERMARK: false/' /config/interface_config.js
+                    sed -i "s|JITSI_WATERMARK_LINK: '[^']*'|JITSI_WATERMARK_LINK: ''|" /config/interface_config.js
+                    sed -i 's/SHOW_POWERED_BY: true/SHOW_POWERED_BY: false/' /config/interface_config.js
           readinessProbe:
             httpGet: { path: /, port: 80 }
             initialDelaySeconds: 10