diff --git a/hosts/proxy/default.nix b/hosts/proxy/default.nix
index 83306c5..90ee580 100644
--- a/hosts/proxy/default.nix
+++ b/hosts/proxy/default.nix
@@ -452,6 +452,7 @@
 
           frontend http-in
             bind *:80
+            tcp-request connection expect-proxy layer4 if { src 178.104.18.93 }
             maxconn 60000
             backlog 8192
             option dontlognull
@@ -496,6 +497,7 @@
           frontend sni_router
             bind *:443
             mode tcp
+            tcp-request connection expect-proxy layer4 if { src 178.104.18.93 }
 
             # Reduce inspection delay - SNI is in first packet (Phase 3)
             tcp-request inspect-delay 500ms  # Was 1s