diff --git a/docker-compose.yml b/docker-compose.yml
index 73959e7..ee63bc4 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -21,6 +21,7 @@ services:
       - dokploy-network
     labels:
       - "traefik.enable=true"
+      # HTTPS router
       - "traefik.http.routers.ngotoolkit.rule=Host(`ngotoolkit.quikcue.com`) || Host(`ngotoolkitlab.com`) || Host(`www.ngotoolkitlab.com`) || Host(`ngotoolkitlab.org`) || Host(`www.ngotoolkitlab.org`)"
       - "traefik.http.routers.ngotoolkit.entrypoints=websecure"
       - "traefik.http.routers.ngotoolkit.tls=true"
@@ -28,6 +29,12 @@ services:
       - "traefik.http.routers.ngotoolkit.tls.domains[0].main=ngotoolkitlab.com"
       - "traefik.http.routers.ngotoolkit.tls.domains[0].sans=www.ngotoolkitlab.com,ngotoolkitlab.org,www.ngotoolkitlab.org,ngotoolkit.quikcue.com"
       - "traefik.http.services.ngotoolkit.loadbalancer.server.port=3000"
+      # HTTP router — redirect to HTTPS
+      - "traefik.http.routers.ngotoolkit-http.rule=Host(`ngotoolkit.quikcue.com`) || Host(`ngotoolkitlab.com`) || Host(`www.ngotoolkitlab.com`) || Host(`ngotoolkitlab.org`) || Host(`www.ngotoolkitlab.org`)"
+      - "traefik.http.routers.ngotoolkit-http.entrypoints=web"
+      - "traefik.http.routers.ngotoolkit-http.middlewares=ngotoolkit-https-redirect"
+      - "traefik.http.middlewares.ngotoolkit-https-redirect.redirectscheme.scheme=https"
+      - "traefik.http.middlewares.ngotoolkit-https-redirect.redirectscheme.permanent=true"
 
 networks:
   dokploy-network: