diff --git a/bootstrap/app.php b/bootstrap/app.php
index d654276..b6ebba5 100644
--- a/bootstrap/app.php
+++ b/bootstrap/app.php
@@ -12,7 +12,7 @@ return Application::configure(basePath: dirname(__DIR__))
         health: '/up',
     )
     ->withMiddleware(function (Middleware $middleware) {
-        //
+        $middleware->trustProxies(at: '*');
     })
     ->withExceptions(function (Exceptions $exceptions) {
         //
diff --git a/docker/entrypoint.sh b/docker/entrypoint.sh
index 8959ebc..916e628 100644
--- a/docker/entrypoint.sh
+++ b/docker/entrypoint.sh
@@ -1,4 +1,20 @@
 #!/bin/sh
 set -e
 
+# Ensure storage directories exist (for volume mounts)
+mkdir -p storage/framework/views \
+    storage/framework/cache \
+    storage/framework/sessions \
+    storage/logs \
+    storage/app/public
+
+# Recreate symlink (lost on empty volume)
+if [ ! -L public/storage ]; then
+    ln -sf ../storage/app/public public/storage
+fi
+
+# Ensure writable
+chmod -R 775 storage bootstrap/cache
+chown -R www-data:www-data storage bootstrap/cache
+
 exec "$@"
diff --git a/docker/nginx.conf b/docker/nginx.conf
index b17d5ac..d27ae38 100644
--- a/docker/nginx.conf
+++ b/docker/nginx.conf
@@ -30,6 +30,7 @@ server {
         fastcgi_index index.php;
         include fastcgi_params;
         fastcgi_param APP_ENV production;
+        fastcgi_param HTTPS on;
     }
 
     location ~ /\.(?!well-known).* {