diff --git a/apps/lychee/app/deploy.yaml b/apps/lychee/app/deploy.yaml
index d85db85..55c0db8 100644
--- a/apps/lychee/app/deploy.yaml
+++ b/apps/lychee/app/deploy.yaml
@@ -44,6 +44,8 @@ spec:
           value: https://lychee.trivernis.net
         - name: TRUSTED_PROXIES
           value: '*'
+        - name: APP_FORCE_HTTPS
+          value: 'true'
       volumes:
       - name: lychee-sym
         persistentVolumeClaim:
diff --git a/apps/lychee/app/route.yaml b/apps/lychee/app/route.yaml
index 12c71b2..ec7d763 100644
--- a/apps/lychee/app/route.yaml
+++ b/apps/lychee/app/route.yaml
@@ -1,4 +1,14 @@
 apiVersion: traefik.containo.us/v1alpha1
+kind: Middleware
+metadata:
+  name: lychee-headers
+  namespace: lychee
+spec:
+  headers:
+    customRequestHeaders:
+      X-Forwarded-Proto: https
+---
+apiVersion: traefik.containo.us/v1alpha1
 kind: IngressRoute
 metadata:
   name: web
@@ -12,6 +22,7 @@ spec:
     middlewares:
       - name: security-headers
         namespace: default
+      - name: lychee-headers
     services:
     - name: lychee
       port: http