diff --git a/infra/nix/nginx.conf.template b/infra/nix/nginx.conf.template
index 65b5e25..b6b0fc4 100644
--- a/infra/nix/nginx.conf.template
+++ b/infra/nix/nginx.conf.template
@@ -15,6 +15,10 @@ http {
     listen 8080;
     server_name _;
 
+    # Use relative redirects (Location: /dashboard/) instead of absolute
+    # URLs that leak the internal listen port (8080) through Traefik.
+    absolute_redirect off;
+
     gzip on;
     gzip_types text/plain text/css application/json application/javascript application/wasm image/svg+xml;
     gzip_min_length 256;