diff --git a/docker-compose.yml b/docker-compose.yml
index 7a56c7cd..126d78d0 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -20,8 +20,10 @@ services:
       - "traefik.enable=true"
       ### <http> ###
       - "traefik.http.middlewares.nopaque-headers.headers.customrequestheaders.X-Forwarded-Proto=http"
+      - "traefik.http.middlewares.nopaque-redirectscheme.redirectscheme.scheme=https"
+      - "traefik.http.middlewares.nopaque-redirectscheme.redirectscheme.permanent=true"
       - "traefik.http.routers.nopaque.entrypoints=web"
-      - "traefik.http.routers.nopaque.middlewares=nopaque-headers"
+      - "traefik.http.routers.nopaque.middlewares=nopaque-headers, nopaque-redirectscheme"
       - "traefik.http.routers.nopaque.rule=Host(`nopaque.localhost`)"  # Change this to match your nopaque domain
       ### </http> ###
       ### <https> ###
@@ -33,7 +35,7 @@ services:
       ### </https> ###
       ### <basicauth help="https://docs.traefik.io/middlewares/basicauth/"> ###
       # - "traefik.http.middlewares.nopaque-basicauth.basicauth.users=name:hashed-password"
-      # - "traefik.http.routers.nopaque.middlewares=nopaque-basicauth, nopaque-headers"
+      # - "traefik.http.routers.nopaque.middlewares=nopaque-basicauth, nopaque-headers, nopaque-redirectscheme"
       # - "traefik.http.middlewares.nopaquesecure-basicauth.basicauth.users=name:hashed-password"
       # - "traefik.http.routers.nopaquesecure.middlewares=nopaquesecure-basicauth, nopaquesecure-headers"
       ### </basicauth> ###