diff --git a/docker-compose.yml b/docker-compose.yml
index 3ec88fd..9889596 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -53,7 +53,7 @@ services:
       # Do not filter on prefix, otherwise the redirect does not work...
       - "traefik.http.routers.pi-hole.rule=Host(`${FQDN}`)"
       - "traefik.http.routers.pi-hole.tls=true"
-      # Not using Letsencrypt, as this service is not accessible from outside
-      # the LAN, and no wildcard domain certificate yet.
-      #- "traefik.http.routers.pi-hole.tls.certresolver=letsencrypt"
+      # This service is allowed only inside the LAN, but a Let's Encrypt
+      # certificate is now required for access from Safari 15
+      - "traefik.http.routers.pi-hole.tls.certresolver=letsencrypt"
       - "traefik.http.routers.pi-hole.middlewares=pi-hole,net-home@file,auth-traefik@file,pi-hole-redirect"