diff --git a/lib/towerops_web/controllers/debug_controller.ex b/lib/towerops_web/controllers/debug_controller.ex
index 2caa070a..8c42bbdc 100644
--- a/lib/towerops_web/controllers/debug_controller.ex
+++ b/lib/towerops_web/controllers/debug_controller.ex
@@ -1,13 +1,13 @@
 defmodule ToweropsWeb.DebugController do
   @moduledoc """
-  Debug endpoints for development environment only.
+  Debug endpoints for troubleshooting. Requires superuser authentication.
   """
 
   use ToweropsWeb, :controller
 
   @doc """
   Display all request headers for debugging cloudflared visitor location headers.
-  Only available in development environment.
+  Available at /admin/headers (requires superuser authentication).
   """
   def headers(conn, _params) do
     # Extract all request headers
diff --git a/lib/towerops_web/router.ex b/lib/towerops_web/router.ex
index 64f0b15f..703b90e9 100644
--- a/lib/towerops_web/router.ex
+++ b/lib/towerops_web/router.ex
@@ -143,6 +143,7 @@ defmodule ToweropsWeb.Router do
     pipe_through [:browser, :require_authenticated_user, :require_superuser]
 
     oban_dashboard("/oban")
+    get "/headers", ToweropsWeb.DebugController, :headers
   end
 
   # Enable Swoosh mailbox preview in development
@@ -151,7 +152,6 @@ defmodule ToweropsWeb.Router do
       pipe_through :browser
 
       forward "/mailbox", Plug.Swoosh.MailboxPreview
-      get "/headers", ToweropsWeb.DebugController, :headers
     end
   end