From d4c67a7d81f904aa8126b2a40d9cd28ba30b7e44 Mon Sep 17 00:00:00 2001
From: Justin Lin <wancat@wancat.cc>
Date: Fri, 27 Feb 2026 20:39:18 +1100
Subject: [PATCH] fix: forward headers to backend to setup cookies properly

---
 docker-compose.prod.yml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/docker-compose.prod.yml b/docker-compose.prod.yml
index b0b520e..6a537b8 100644
--- a/docker-compose.prod.yml
+++ b/docker-compose.prod.yml
@@ -12,6 +12,7 @@ services:
       - '--providers.docker=true'
       - '--providers.docker.exposedbydefault=false'
       - '--entrypoints.web.address=:8000'
+      - '--entrypoints.web.forwardedHeaders.insecure=true' # trust all X-Forwarded headers
     volumes:
       - /var/run/docker.sock:/var/run/docker.sock:ro