diff --git a/dc-gui.yaml b/dc-gui.yaml
index 40645f3b..75ee6270 100644
--- a/dc-gui.yaml
+++ b/dc-gui.yaml
@@ -13,7 +13,7 @@ services:
       dockerfile: config/docker/caddy/web-app/Dockerfile
       args:
         # Frontend spezifisch:
-        CADDY_VERSION: "${DOCKER_CADDY_VERSION:-2.9-alpine}"
+        CADDY_VERSION: "${DOCKER_CADDY_VERSION:-2.11-alpine}"
         # Metadaten:
         VERSION: "${DOCKER_VERSION:-1.0.0-SNAPSHOT}"
         BUILD_DATE: "${DOCKER_BUILD_DATE}"
diff --git a/frontend/shells/meldestelle-portal/src/jsMain/resources/index.html b/frontend/shells/meldestelle-portal/src/jsMain/resources/index.html
index e938bc6d..fd5c423f 100644
--- a/frontend/shells/meldestelle-portal/src/jsMain/resources/index.html
+++ b/frontend/shells/meldestelle-portal/src/jsMain/resources/index.html
@@ -27,7 +27,7 @@
         ? apiOverride.replace(/\/$/, '')
         : (apiFromCaddy && !apiFromCaddy.startsWith('{{')
             ? apiFromCaddy.replace(/\/$/, '')
-            : window.location.origin.replace(/\/$/, ''));
+            : 'https://' + window.location.origin.replace(/\/$/, ''));
 
       // Caddy injiziert: {{.Env.KEYCLOAK_URL}} → z.B. "https://auth.mo-code.at"
       const kcFromCaddy = '{{.Env.KEYCLOAK_URL}}';
@@ -36,7 +36,7 @@
         ? kcOverride.replace(/\/$/, '')
         : (kcFromCaddy && !kcFromCaddy.startsWith('{{')
             ? kcFromCaddy.replace(/\/$/, '')
-            : 'http://' + window.location.hostname + ':8180');
+            : 'https://' + window.location.hostname + ':8180');
 
     } catch (e) {
       globalThis.API_BASE_URL = 'http://localhost:8081';