diff --git a/docker-compose.yml b/docker-compose.yml
index 3357714..58572b5 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -25,6 +25,11 @@ services:
     labels:
       - "traefik.enable=true"
       - "traefik.http.services.wpad.loadbalancer.server.port=80"
+      # HTTP für WPAD Auto-Discovery (kein TLS!)
+      - "traefik.http.routers.wpad-http.rule=Host(`wpad.lan`) || Host(`wpad`) || Host(`wpad.fritz.box`)"
+      - "traefik.http.routers.wpad-http.entrypoints=web"
+      - "traefik.http.routers.wpad-http.service=wpad"
+      # HTTPS Variante bleibt erhalten
       - "traefik.http.routers.wpad-lan.rule=Host(`wpad.lan`)"
       - "traefik.http.routers.wpad-lan.entrypoints=websecure"
       - "traefik.http.routers.wpad-lan.tls=true"