diff --git a/docker-compose.traefik.yml b/docker-compose.traefik.yml
index 53fbdb9fc0140d229fe424d9364cbc369284dd7c..195a5702be7d5a216e33bef58c1e291c2a0f9ce4 100644
--- a/docker-compose.traefik.yml
+++ b/docker-compose.traefik.yml
@@ -14,13 +14,15 @@ services:
       - "traefik.docker.network=reverse-proxy"
       - "traefik.enable=true"
       ### <http> ###
+      - "traefik.http.middlewares.nopaque-header.headers.customrequestheaders.X-Forwarded-Proto=http"
       - "traefik.http.routers.nopaque.entrypoints=web"
-      - "traefik.http.routers.nopaque.middlewares=redirect-to-https@file"
+      - "traefik.http.routers.nopaque.middlewares=nopaque-header, redirect-to-https@file"
       - "traefik.http.routers.nopaque.rule=Host(`${NOPAQUE_DOMAIN:-localhost}`)"
       ### </http> ###
       ### <https> ###
+      - "traefik.http.middlewares.nopaque-secure-header.headers.customrequestheaders.X-Forwarded-Proto=https"
       - "traefik.http.routers.nopaque-secure.entrypoints=web-secure"
-      - "traefik.http.routers.nopaque-secure.middlewares=hsts-header@file"
+      - "traefik.http.routers.nopaque-secure.middlewares=hsts-header@file, nopaque-secure-header"
       - "traefik.http.routers.nopaque-secure.rule=Host(`${NOPAQUE_DOMAIN:-localhost}`)"
       - "traefik.http.routers.nopaque-secure.tls.certresolver=<CERTRESOLVER>"
       - "traefik.http.routers.nopaque-secure.tls.options=intermediate@file"