diff --git a/bootstrap/app.php b/bootstrap/app.php
index 4b327d2..d04b44f 100644
--- a/bootstrap/app.php
+++ b/bootstrap/app.php
@@ -13,7 +13,11 @@ return Application::configure(basePath: dirname(__DIR__))
         health: '/up',
     )
     ->withMiddleware(function (Middleware $middleware): void {
-        //
+        // Behind a reverse proxy (nginx serves plain HTTP on :8001; TLS is
+        // terminated in front of it), so trust X-Forwarded-* headers —
+        // otherwise Laravel/Livewire generate http:// URLs even when the
+        // original request was https, tripping mixed-content blocking.
+        $middleware->trustProxies(at: '*');
     })
     ->withExceptions(function (Exceptions $exceptions): void {
         $exceptions->shouldRenderJsonWhen(