diff --git a/Caddyfile b/Caddyfile
index 4ef25e2..1deddb7 100755
--- a/Caddyfile
+++ b/Caddyfile
@@ -60,10 +60,12 @@ http://10.76.152.164 {
     import reverse_proxy_config
 }
 
-# Handle IP address access (HTTPS - self-signed)
+# Handle IP address access (HTTPS - self-signed with IP in certificate)
 https://10.76.152.164 {
     import reverse_proxy_config
-    tls internal
+    tls {
+        on_demand
+    }
 }
 
 # Catch-all for any other HTTP requests