diff --git a/docker-compose.yml b/docker-compose.yml
index 37934ec..0238040 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -62,19 +62,20 @@ services:
     labels:
       - "traefik.enable=true"
 
-      # Router (HTTPS)
+      # HTTPS router (unchanged – perfect)
       - "traefik.http.routers.ztnet.rule=Host(`ztnet.rozic-dev.com`)"
       - "traefik.http.routers.ztnet.entrypoints=websecure"
       - "traefik.http.routers.ztnet.tls=true"
       - "traefik.http.routers.ztnet.tls.certresolver=letsencrypt"
 
-      # HTTP → HTTPS redirect
+      # HTTP router – ONLY for ACME challenge + built-in redirect
       - "traefik.http.routers.ztnet-http.rule=Host(`ztnet.rozic-dev.com`)"
       - "traefik.http.routers.ztnet-http.entrypoints=web"
-      - "traefik.http.routers.ztnet-http.middlewares=redirect-to-https"
-      - "traefik.http.middlewares.redirect-to-https.redirectscheme.scheme=https"
+      # ← REMOVE the two lines below completely:
+      # - "traefik.http.routers.ztnet-http.middlewares=redirect-to-https"
+      # - "traefik.http.middlewares.redirect-to-https.redirectscheme.scheme=https"
 
-      # Service inside container
+      # Service
       - "traefik.http.services.ztnet.loadbalancer.server.port=3000"
       - "traefik.docker.network=traefik_default"