diff --git a/config/prod.exs b/config/prod.exs
index e039cd38..5e0f75d4 100644
--- a/config/prod.exs
+++ b/config/prod.exs
@@ -25,13 +25,5 @@ config :swoosh, local: false
 # manifest is generated by the `mix assets.deploy` task,
 # which you should run after static files are built and
 # before starting your production server.
-config :towerops, ToweropsWeb.Endpoint,
-  cache_static_manifest: "priv/static/cache_manifest.json",
-  # Force SSL redirects and enable HSTS (HTTP Strict Transport Security)
-  # HSTS tells browsers to only use HTTPS for this domain for the next year
-  # Exclude /health endpoint from SSL redirect (used by K8s probes on internal network)
-  force_ssl: [
-    hsts: true,
-    rewrite_on: [:x_forwarded_host, :x_forwarded_port, :x_forwarded_proto],
-    exclude: ["health"]
-  ]
+config :towerops, ToweropsWeb.Endpoint, cache_static_manifest: "priv/static/cache_manifest.json"
+# SSL/TLS is handled by Cloudflared proxy - no force_ssl needed