diff --git a/apps/lychee/app/deploy.yaml b/apps/lychee/app/deploy.yaml
index ec4f979..fed42c7 100644
--- a/apps/lychee/app/deploy.yaml
+++ b/apps/lychee/app/deploy.yaml
@@ -42,8 +42,8 @@ spec:
           value: /lychee/db/lychee.db
         - name: APP_URL
           value: https://lychee.trivernis.net
-        # - name: APP_FORCE_HTTPS
-        #   value: "true"
+        - name: APP_FORCE_HTTPS
+          value: "true"
         - name: TRUSTED_PROXIES
           value: "*"
       volumes:
diff --git a/apps/lychee/app/route.yaml b/apps/lychee/app/route.yaml
index 60477d1..ab7d788 100644
--- a/apps/lychee/app/route.yaml
+++ b/apps/lychee/app/route.yaml
@@ -7,7 +7,7 @@ spec:
   headers:
     customRequestHeaders:
       X-Forwarded-Proto: https
-      X-Forwarded-SSL: on
+      X-Forwarded-SSL: off
 ---
 apiVersion: traefik.containo.us/v1alpha1
 kind: IngressRoute
@@ -21,9 +21,8 @@ spec:
   - match: Host(`lychee.trivernis.net`)
     kind: Rule
     middlewares:
-      - name: strict-security-headers
+      - name: security-headers
         namespace: default
-      - name: lychee-headers
     services:
     - name: lychee
       port: http