diff --git a/nginx/nginx.conf b/nginx/nginx.conf
index 07f5223..70f8d94 100644
--- a/nginx/nginx.conf
+++ b/nginx/nginx.conf
@@ -35,7 +35,7 @@ server {
     resolver 127.0.0.11 valid=30s ipv6=off;
     resolver_timeout 5s;
 
-    set $backend_server 172.18.10.8:8080;
+    set $backend_server ttmt-web:8080;
     # Internal MeshCentral hop to avoid upstream TLS handshake instability.
     set $meshserver meshcentral:8082;
     # Public host MeshCentral expects in Host header.
@@ -193,9 +193,12 @@ server {
         proxy_set_header Host $host;
         proxy_set_header X-Real-IP $remote_addr;
         proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+
+        proxy_set_header X-Forwarded-Proto https;
+        proxy_set_header X-Forwarded-Host $host;
+        proxy_set_header X-Forwarded-Port 443;
         proxy_set_header X-Forwarded-Proto $scheme;
         proxy_set_header X-Forwarded-Host $host;
-
         proxy_http_version 1.1;
         proxy_set_header Upgrade $http_upgrade;
         proxy_set_header Connection "upgrade";