diff --git a/app.yml b/app.yml
index 41cedc4..5747456 100644
--- a/app.yml
+++ b/app.yml
@@ -71,6 +71,10 @@ hooks:
 ## Memory limit: 2GB container + 2GB swap
 run:
   - exec: echo "Beginning of custom commands"
+  ## Fix CSRF issues behind Cloudflare/Traefik reverse proxy chain.
+  ## Force X-Forwarded-Proto to always be https since all external traffic comes via Cloudflare.
+  - exec:
+      cmd: sed -i 's/default \$scheme;/default https;/' /etc/nginx/conf.d/discourse.conf
 
 ## Traefik integration labels
 labels: