diff --git a/ummah-wordpress/docker-compose.yml b/ummah-wordpress/docker-compose.yml
index dbd7b12..2e1dda3 100644
--- a/ummah-wordpress/docker-compose.yml
+++ b/ummah-wordpress/docker-compose.yml
@@ -43,7 +43,7 @@ services:
         define('WP_MEMORY_LIMIT', '256M');
         define('WP_HOME', 'https://ummah2.falahos.my');
         define('WP_SITEURL', 'https://ummah2.falahos.my');
-        $_SERVER['HTTPS'] = 'on';
+        $$_SERVER['HTTPS'] = 'on';
         define('FORCE_SSL_ADMIN', true);
     volumes:
       - ummah2-wp-data:/var/www/html
@@ -53,14 +53,15 @@ services:
       - traefik-public
     labels:
       - "traefik.enable=true"
+      # HTTPS router (Cloudflare terminates SSL, Traefik sees HTTP on websecure)
       - "traefik.http.routers.ummah2.rule=Host(`ummah2.falahos.my`)"
       - "traefik.http.routers.ummah2.entrypoints=websecure"
       - "traefik.http.routers.ummah2.tls.certresolver=letsencrypt"
       - "traefik.http.services.ummah2.loadbalancer.server.port=80"
-      # Redirect http→https
+      # HTTP router — no middleware, just pass through (Cloudflare handles redirect)
       - "traefik.http.routers.ummah2-http.rule=Host(`ummah2.falahos.my`)"
       - "traefik.http.routers.ummah2-http.entrypoints=web"
-      - "traefik.http.routers.ummah2-http.middlewares=https-redirect"
+      - "traefik.http.routers.ummah2-http.service=ummah2"
 
   wpcli:
     image: wordpress:cli-2-php8.3