diff --git a/.env.example b/.env.example
index ba949b0..cdcc62a 100644
--- a/.env.example
+++ b/.env.example
@@ -7,6 +7,7 @@ POSTGRES_DB="drinktracker"
 # NextAuth
 NEXTAUTH_URL="http://localhost:3000"
 NEXTAUTH_SECRET="generate-with: openssl rand -base64 32"
+AUTH_TRUST_HOST="true"  # Set to true when behind a reverse proxy
 
 # OAuth Providers
 GOOGLE_CLIENT_ID=""
diff --git a/install.sh b/install.sh
index e2479aa..76790c6 100644
--- a/install.sh
+++ b/install.sh
@@ -270,6 +270,7 @@ POSTGRES_DB="${PG_DB}"
 # ─── NextAuth ────────────────────────────────────────────
 NEXTAUTH_URL="${APP_URL}"
 NEXTAUTH_SECRET="${AUTH_SECRET}"
+AUTH_TRUST_HOST="true"
 
 # ─── OAuth Providers ─────────────────────────────────────
 GOOGLE_CLIENT_ID="${GOOGLE_CID}"