# Reverse Proxy
URL: https://usememos.com/docs/deploy/reverse-proxy

For production, run Memos behind a reverse proxy such as Nginx, Caddy, or Traefik and serve HTTPS.

## Recommended settings [#recommended-settings]

* set `MEMOS_INSTANCE_URL` to the public URL of your instance
* forward standard proxy headers such as `Host`, `X-Forwarded-Proto`, and `X-Forwarded-For`
* restrict access to the admin interface as needed
* make sure the externally visible URL matches what Memos uses for links and cookies

## Why this matters [#why-this-matters]

A reverse proxy gives you:

* TLS termination
* stable public routing
* easier integration with existing infrastructure
* a place to apply access control, logging, and rate limiting

## Typical concerns to verify [#typical-concerns-to-verify]

* redirects point to the correct external URL
* public links generated by Memos use the correct hostname
* cookies and auth flows behave correctly over HTTPS
* uploaded assets are still accessible through the public route layout