diff --git a/00_teleport/docker-compose.yml b/00_teleport/docker-compose.yml
index 533d00e..75af4f6 100644
--- a/00_teleport/docker-compose.yml
+++ b/00_teleport/docker-compose.yml
@@ -13,15 +13,14 @@ services:
 
     labels:
       - "traefik.enable=true"
-      # HTTPS entry
-      - "traefik.http.routers.teleport.rule=Host(`teleport.luckyden.org`)"
-      - "traefik.http.routers.teleport.entrypoints=websecure"
-      - "traefik.http.routers.teleport.tls=true"
-      - "traefik.http.services.teleport.loadbalancer.server.port=3080"
-      # - "traefik.http.routers.teleport.middlewares=authentik@docker"
-      - "traefik.http.services.teleport.loadbalancer.server.scheme=http"
-      - "traefik.http.middlewares.teleport-headers.headers.customrequestheaders.X-Forwarded-Proto=https"
-      - "traefik.http.routers.teleport.middlewares=teleport-headers@docker"
+      - "traefik.docker.network=tan-network"
+
+      # TCP router (IMPORTANT)
+      - "traefik.tcp.routers.teleport.rule=HostSNI(`teleport.luckyden.org`)"
+      - "traefik.tcp.routers.teleport.entrypoints=websecure"
+      - "traefik.tcp.routers.teleport.tls.passthrough=true"
+
+      - "traefik.tcp.services.teleport.loadbalancer.server.port=3080"
 
 networks:
   tan-network:
diff --git a/02_traefik/compose.yaml b/02_traefik/compose.yaml
index 8ed7a33..40ba9d9 100644
--- a/02_traefik/compose.yaml
+++ b/02_traefik/compose.yaml
@@ -13,6 +13,8 @@ services:
       - --entrypoints.web.address=:80
       - --entrypoints.websecure.address=:443
 
+      - --serversTransport.insecureSkipVerify=true
+      
       # ✅ Cloudflare DNS challenge
       - --certificatesresolvers.cloudflare.acme.dnschallenge=true
       - --certificatesresolvers.cloudflare.acme.dnschallenge.provider=cloudflare