diff --git a/nginx/nginx.conf b/nginx/nginx.conf
index a4d32bd..4d45f16 100644
--- a/nginx/nginx.conf
+++ b/nginx/nginx.conf
@@ -155,7 +155,11 @@ server {
     }
 
     location ~ ^/api/meshcentral/proxy/(.*)$ {
-        proxy_pass http://$meshserver/$1$is_args$args;
+        # Forward directly to MeshCentral via Tailscale HTTPS so MeshCentral receives
+        # requests over TLS and generates correct absolute URLs based on $meshhost.
+        proxy_pass https://soict-overleaf.tailc51e09.ts.net:8443/$1$is_args$args;
+        proxy_ssl_verify off;
+        proxy_ssl_server_name on;
         proxy_cookie_path / "/; HTTPOnly; Secure; SameSite=None";
 
         proxy_set_header Host $meshhost;