diff --git a/.env.sample b/.env.sample
index 9389641..b3b7966 100644
--- a/.env.sample
+++ b/.env.sample
@@ -225,3 +225,6 @@ WRITE_TIMEOUT=0s
 
 ## Enable onion service support
 #ONION_ENABLED=1
+
+# YAML array of trusted subnets
+TRUSTED_IPS=
diff --git a/abra.sh b/abra.sh
index d5c01aa..c55bf45 100644
--- a/abra.sh
+++ b/abra.sh
@@ -1,3 +1,3 @@
-export TRAEFIK_YML_VERSION=v32
+export TRAEFIK_YML_VERSION=v32a
 export FILE_PROVIDER_YML_VERSION=v12
 export ENTRYPOINT_VERSION=v5
diff --git a/traefik.yml.tmpl b/traefik.yml.tmpl
index 28277b9..35a1258 100644
--- a/traefik.yml.tmpl
+++ b/traefik.yml.tmpl
@@ -33,6 +33,10 @@ entrypoints:
           to: web-secure
   web-secure:
     address: ":443"
+{{ if ne (env "TRUSTED_IPS") "" }}
+    forwardedHeaders:
+      trustedIPs: {{ env "TRUSTED_IPS" }}
+{{ end }}
     transport:
       respondingTimeouts:
         readTimeout: {{ env "READ_TIMEOUT" }}