diff --git a/bootstrap/app.php b/bootstrap/app.php
index 6a8c1f2..f259637 100644
--- a/bootstrap/app.php
+++ b/bootstrap/app.php
@@ -12,10 +12,14 @@ return Application::configure(basePath: dirname(__DIR__))
         health: '/up',
     )
     ->withMiddleware(function (Middleware $middleware) {
+        // 信任所有代理转发头（腾讯 EdgeCDN HTTPS 回源 HTTP 场景）
+        // CDN 携带 X-Forwarded-Proto: https，Laravel 据此将请求识别为 HTTPS，url()/route() 生成正确的 https:// 链接
+        $middleware->trustProxies(at: '*');
+
         $middleware->alias([
-            'chat.auth' => \App\Http\Middleware\ChatAuthenticate::class,
-            'chat.level' => \App\Http\Middleware\LevelRequired::class,
-            'chat.site_owner' => \App\Http\Middleware\SiteOwnerRequired::class,
+            'chat.auth'         => \App\Http\Middleware\ChatAuthenticate::class,
+            'chat.level'        => \App\Http\Middleware\LevelRequired::class,
+            'chat.site_owner'   => \App\Http\Middleware\SiteOwnerRequired::class,
             'chat.has_position' => \App\Http\Middleware\HasActivePosition::class,
         ]);