diff --git a/templates/home-assistant/docker-compose.yml b/templates/home-assistant/docker-compose.yml
index a0aa905..29faf34 100644
--- a/templates/home-assistant/docker-compose.yml
+++ b/templates/home-assistant/docker-compose.yml
@@ -11,6 +11,29 @@ services:
     image: ghcr.io/home-assistant/home-assistant:2026.2.2
     container_name: home-assistant
     restart: unless-stopped
+    entrypoint: ["/bin/sh", "-c"]
+    command:
+      - |
+        # Ensure reverse-proxy (Traefik) trusted_proxies config exists.
+        # 172.16.0.0/12 covers all Docker bridge networks.
+        CFG=/config/configuration.yaml
+        if [ -f "$$CFG" ] && ! grep -q 'trusted_proxies' "$$CFG"; then
+          printf '\nhttp:\n  use_x_forwarded_for: true\n  trusted_proxies:\n    - 172.16.0.0/12\n' >> "$$CFG"
+        elif [ ! -f "$$CFG" ]; then
+          cat > "$$CFG" << 'HACFG'
+        default_config:
+        frontend:
+          themes: !include_dir_merge_named themes
+        automation: !include automations.yaml
+        script: !include scripts.yaml
+        scene: !include scenes.yaml
+        http:
+          use_x_forwarded_for: true
+          trusted_proxies:
+            - 172.16.0.0/12
+        HACFG
+        fi
+        exec /init
     environment:
       - TZ=Europe/Budapest
     volumes: