diff --git a/README.md b/README.md
index 807f84d..8372768 100644
--- a/README.md
+++ b/README.md
@@ -105,7 +105,7 @@ env DB_PATH=/var/db/tag_albums/tag_albums.sqlite3 \
 
 These pieces live in the `home-assistant-config` repo:
 
-- `configuration.yaml`: two `rest_command`s, `tag_albums_scan` and `tag_albums_lookup`, pointing at `http://tag-albums.home.knbg:8087`.
+- `configuration.yaml`: two `rest_command`s, `tag_albums_scan` and `tag_albums_lookup`, pointing at `https://tag-albums.home.knbg` (a reverse proxy in front of port 8087). They set `verify_ssl: false`, because the certificate comes from the home CA and HA only trusts its built-in list of public CAs.
 - `secrets.yaml`: `tag_albums_auth: "Bearer <API_TOKEN>"`.
 - `scripts.yaml`: `play_album_by_tag` and `stop_album_by_tag` call those commands.