diff --git a/ansible/roles/forgejo/docker-stack.yml.j2 b/ansible/roles/forgejo/docker-stack.yml.j2
index 8874beb..1bd5b19 100644
--- a/ansible/roles/forgejo/docker-stack.yml.j2
+++ b/ansible/roles/forgejo/docker-stack.yml.j2
@@ -30,10 +30,12 @@ services:
         constraints:
           - "node.labels.forgejo == true"
       labels:
-        - traefik.port=80
+        - traefik.port=443
         - traefik.enable=true
-        - traefik.http.routers.forgejo.entrypoints=web
+        - traefik.http.routers.forgejo.entrypoints=websecure
         - traefik.http.routers.forgejo.rule=Host(`{{ git_domain }}`)
+        - traefik.http.routers.forgejo.tls=true
+        - traefik.http.routers.forgejo.tls.certresolver=letsencrypt
         - traefik.http.routers.forgejo.service=forgejo
         - traefik.http.services.forgejo.loadbalancer.server.port=3000
         - traefik.docker.network=traefik