diff --git a/home-apps/home.yaml b/home-apps/home.yaml
index 67f0a95..8070d8e 100644
--- a/home-apps/home.yaml
+++ b/home-apps/home.yaml
@@ -47,6 +47,7 @@ metadata:
   namespace: home-apps
   annotations:
     cert-manager.io/cluster-issuer: "letsencrypt-prod"
+    traefik.ingress.kubernetes.io/router.middlewares: "traefik-middleware-global-auth@kubernetescrd"
 spec:
   ingressClassName: traefik
   tls:
diff --git a/traefik-middleware/global-auth.yaml b/traefik-middleware/global-auth.yaml
index 64422a4..61b6194 100644
--- a/traefik-middleware/global-auth.yaml
+++ b/traefik-middleware/global-auth.yaml
@@ -6,6 +6,10 @@ metadata:
 spec:
   forwardAuth:
     address: "https://pass.junv.cc/auth"
+    authRequestHeaders:
+      - "X-Forwarded-Proto"
+      - "X-Forwarded-Host"
+      - "X-Forwarded-Uri"
     authResponseHeaders:
       - "X-Forwarded-User"
     trustForwardHeader: true