diff --git a/deploy/Caddyfile b/deploy/Caddyfile
index 406d14a..cd8794f 100644
--- a/deploy/Caddyfile
+++ b/deploy/Caddyfile
@@ -1,4 +1,6 @@
 test.nix.org.cn {
+    tls /etc/caddy/cert.crt /etc/caddy/key.pem
+
     handle /app/api/* {
         reverse_proxy backend:8000
     }
diff --git a/deploy/compose.yaml b/deploy/compose.yaml
index 780790e..9e89f27 100644
--- a/deploy/compose.yaml
+++ b/deploy/compose.yaml
@@ -55,6 +55,8 @@ services:
             - "443:443"
         volumes:
             - ./Caddyfile:/etc/caddy/Caddyfile
+            - ./cert.crt:/etc/caddy/cert.crt
+            - ./key.pem:/etc/caddy/key.pem
             - ./data/caddy/data:/data
             - ./data/caddy/config:/config
         depends_on: