diff --git a/highscore/app/config.py b/highscore/app/config.py
index a71be77..7b622c3 100644
--- a/highscore/app/config.py
+++ b/highscore/app/config.py
@@ -17,6 +17,7 @@ class Settings(BaseSettings):
     allowed_hosts: list[str] = []
     installed_apps: list[str] = []
     api_secret: str = "selecta-secret"
+    force_script_name: str = ""
 
     db_engine: str = "django.db.backends.postgresql"
     db_name: str = "selecta-highscore"
diff --git a/highscore/app/settings.py b/highscore/app/settings.py
index 9d58e2d..44c5bde 100644
--- a/highscore/app/settings.py
+++ b/highscore/app/settings.py
@@ -35,6 +35,9 @@ INSTALLED_APPS = [
 ]
 
 API_SECRET = env.api_secret
+USE_X_FORWARDED_HOST = True
+FORCE_SCRIPT_NAME = env.force_script_name
+SECURE_PROXY_SSL_HEADER = ("HTTP_X_FORWARDED_PROTO", "https")
 
 MIDDLEWARE = [
     "django.middleware.security.SecurityMiddleware",