diff --git a/swarm/kopia.yaml b/swarm/kopia.yaml
index 992984c..a00c8f3 100644
--- a/swarm/kopia.yaml
+++ b/swarm/kopia.yaml
@@ -42,14 +42,21 @@ services:
           - node.hostname == znas
       labels:
         gremlin.version: "2026-04-1"
+        gremlin.caddy.reverse_proxy.skip: "true"
+        gremlin.context: "Kopia runs its own TLS on port 51515. caddy.reverse_proxy must use https:// with tls_insecure_skip_verify. monitor.url uses tcp check as HTTP will fail against a TLS endpoint."
+
         # --- Caddy ---
         caddy: kopia.netgrimoire.com
-        caddy.reverse_proxy: kopia:51515
+        caddy.reverse_proxy: https://kopia:51515
+        caddy.reverse_proxy.transport: http
+        caddy.reverse_proxy.transport.tls_insecure_skip_verify: true
         caddy.import_1: crowdsec
         caddy.import_2: authentik
-  
 
-        # --- Uptime Kuma ---
+        # --- Monitor ---
+        monitor.name: Kopia
+        monitor.url: tcp://kopia:51515
+        monitor.type: tcp
 
         # --- Homepage ---
         homepage.group: Backup
@@ -57,14 +64,10 @@ services:
         homepage.icon: kopia.png
         homepage.href: https://kopia.netgrimoire.com
         homepage.description: Snapshot backup and deduplication
-        monitor.name: Kopia
-        monitor.url: http://kopia:51515
 
         # --- DIUN ---
         diun.enable: "true"
 
 networks:
   netgrimoire:
-    external: true
-
-##
\ No newline at end of file
+    external: true
\ No newline at end of file