diff --git a/admin/app/bootstrap/app.php b/admin/app/bootstrap/app.php
index 7a2848f..abe4007 100644
--- a/admin/app/bootstrap/app.php
+++ b/admin/app/bootstrap/app.php
@@ -12,7 +12,9 @@ return Application::configure(basePath: dirname(__DIR__))
         health: '/up',
     )
     ->withMiddleware(function (Middleware $middleware): void {
-        //
+        // Caddy terminates TLS; trust its forwarded headers so Laravel sees
+        // https. REQUIRED for signed URLs (Livewire uploads) to validate.
+        $middleware->trustProxies(at: '*');
     })
     ->withExceptions(function (Exceptions $exceptions): void {
         $exceptions->shouldRenderJsonWhen(