diff --git a/apps/lychee/app/route.yaml b/apps/lychee/app/route.yaml
index 05e9ed5..e6cf74c 100644
--- a/apps/lychee/app/route.yaml
+++ b/apps/lychee/app/route.yaml
@@ -1,4 +1,18 @@
 apiVersion: traefik.containo.us/v1alpha1
+kind: Middleware
+metadata:
+  name: lychee-headers
+  namespace: lychee
+spec:
+  headers:
+    customRequestHeaders:
+      X-Forwarded-Proto: https
+      X-Forwarded-Host: lychee.trivernis.net
+      Host: lychee.trivernis.net
+      X-Forwarded-Port: "443"
+
+---
+apiVersion: traefik.containo.us/v1alpha1
 kind: IngressRoute
 metadata:
   name: web
@@ -12,6 +26,7 @@ spec:
     middlewares:
       - name: security-headers
         namespace: default
+      - name: lychee-headers
     services:
     - name: lychee
       port: http