diff --git a/CHANGELOG.md b/CHANGELOG.md
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,3 +1,7 @@
+# 0.2.6.0
+
+- Add support for https in reverse_proxy
+
 # 0.2.5.1
 
 - Add support for GHC 9.0.
diff --git a/README.md b/README.md
--- a/README.md
+++ b/README.md
@@ -83,6 +83,7 @@
 reverse_proxy:
   host: myapp.example.com
   port: 80
+  secure: false
 ```
 
 ### Self-hosted GitLab
diff --git a/src/Network/Wai/Auth/Config.hs b/src/Network/Wai/Auth/Config.hs
--- a/src/Network/Wai/Auth/Config.hs
+++ b/src/Network/Wai/Auth/Config.hs
@@ -42,8 +42,9 @@
 
 -- | Configuration for reverse proxy application.
 data ReverseProxy = ReverseProxy
-    { rpHost :: T.Text -- ^ Hostname of the webserver
-    , rpPort :: Int -- ^ Port of the webserver
+    { rpHost   :: T.Text -- ^ Hostname of the destination webserver
+    , rpPort   :: Int -- ^ Port of the destination webserver
+    , rpSecure :: Maybe Bool -- ^ Should the request be sent to destination webbserver using https or not (default: false)
     }
 
 -- | Available services.
diff --git a/src/Network/Wai/Auth/Executable.hs b/src/Network/Wai/Auth/Executable.hs
--- a/src/Network/Wai/Auth/Executable.hs
+++ b/src/Network/Wai/Auth/Executable.hs
@@ -14,7 +14,7 @@
 import           Data.Yaml.Config                     (loadYamlSettings, useEnv)
 import           Network.HTTP.Client.TLS              (getGlobalManager)
 import           Network.HTTP.ReverseProxy            (ProxyDest (..),
-                                                       WaiProxyResponse (WPRProxyDest),
+                                                       WaiProxyResponse (WPRProxyDest, WPRProxyDestSecure),
                                                        defaultOnExc, waiProxyTo)
 import           Network.Wai                          (Application)
 import           Network.Wai.Application.Static       (defaultFileServerSettings,
@@ -41,13 +41,18 @@
       { ssRedirectToIndex = fsRedirectToIndex
       , ssAddTrailingSlash = fsAddTrailingSlash
       }
-serviceToApp (ServiceProxy (ReverseProxy host port)) = do
+serviceToApp (ServiceProxy (ReverseProxy host port secure)) = do
   manager <- getGlobalManager
   return $
     waiProxyTo
-      (const $ return $ WPRProxyDest $ ProxyDest (encodeUtf8 host) port)
+      (const $ return $ proxydest $ ProxyDest (encodeUtf8 host) port)
       defaultOnExc
       manager
+  where
+    proxydest =
+      case secure of
+        Just True -> WPRProxyDestSecure
+        _         -> WPRProxyDest
 
 
 -- | Read configuration from a yaml file with ability to use environment
diff --git a/wai-middleware-auth.cabal b/wai-middleware-auth.cabal
--- a/wai-middleware-auth.cabal
+++ b/wai-middleware-auth.cabal
@@ -1,6 +1,6 @@
 cabal-version:       1.18
 name:                wai-middleware-auth
-version:             0.2.5.1
+version:             0.2.6.0
 synopsis:            Authentication middleware that secures WAI application
 description:         Please see the README and Haddocks at <https://www.stackage.org/package/wai-middleware-auth>
 license:             MIT