diff --git a/docker-compose.jeffsi.yml b/docker-compose.jeffsi.yml
index 2c001c0..d11224a 100644
--- a/docker-compose.jeffsi.yml
+++ b/docker-compose.jeffsi.yml
@@ -15,13 +15,12 @@ services:
             - ./branding/images:/usr/share/jitsi-meet/images/custom:ro
             - ./branding/interface_config.js:/defaults/interface_config.js:ro
         labels:
-            # Traefik routing
+            # Traefik routing - web entrypoint (Cloudflare tunnel sends to :80)
             - "traefik.enable=true"
             - "traefik.http.routers.jeffsi-meet.rule=Host(`meet.jeffemmett.com`)"
-            - "traefik.http.routers.jeffsi-meet.entrypoints=websecure"
-            - "traefik.http.routers.jeffsi-meet.tls=true"
+            - "traefik.http.routers.jeffsi-meet.entrypoints=web"
             - "traefik.http.services.jeffsi-meet.loadbalancer.server.port=80"
-            # BOSH/WebSocket support
+            # BOSH/WebSocket support - tell Jitsi the original request was HTTPS
             - "traefik.http.middlewares.jeffsi-meet-headers.headers.customrequestheaders.X-Forwarded-Proto=https"
             - "traefik.http.routers.jeffsi-meet.middlewares=jeffsi-meet-headers"
         environment: