diff --git a/.claude/settings.json b/.claude/settings.json
index b682447..3fec581 100644
--- a/.claude/settings.json
+++ b/.claude/settings.json
@@ -11,6 +11,9 @@
       "PowerShell(php artisan serve --port=8000)",
       "Bash(docker version *)",
       "Bash(docker run *)"
+    ],
+    "additionalDirectories": [
+      "c:\\Users\\User\\.claude\\projects\\c--Users-User-Aplikasi-spr2026-taklimat\\memory"
     ]
   }
 }
diff --git a/bootstrap/app.php b/bootstrap/app.php
index 0b90963..7a7f194 100644
--- a/bootstrap/app.php
+++ b/bootstrap/app.php
@@ -12,6 +12,17 @@ return Application::configure(basePath: dirname(__DIR__))
         health: '/up',
     )
     ->withMiddleware(function (Middleware $middleware): void {
+        // Behind the host nginx (SSL terminator) -> web nginx -> php-fpm.
+        // Trust the forwarded headers so Laravel detects https and generates
+        // https URLs/assets (elak mixed-content bila SSL aktif).
+        $middleware->trustProxies(
+            at: '*',
+            headers: Request::HEADER_X_FORWARDED_FOR
+                | Request::HEADER_X_FORWARDED_HOST
+                | Request::HEADER_X_FORWARDED_PORT
+                | Request::HEADER_X_FORWARDED_PROTO,
+        );
+
         $middleware->alias([
             'role' => \App\Http\Middleware\EnsureRole::class,
         ]);