diff --git a/blueprints/plane/docker-compose.yml b/blueprints/plane/docker-compose.yml
index 7dcf83eb..b0b89db5 100644
--- a/blueprints/plane/docker-compose.yml
+++ b/blueprints/plane/docker-compose.yml
@@ -37,6 +37,10 @@ x-proxy-env: &proxy-env
   APP_DOMAIN: ${APP_DOMAIN:-localhost}
   FILE_SIZE_LIMIT: ${FILE_SIZE_LIMIT:-5242880}
   BUCKET_NAME: ${AWS_S3_BUCKET_NAME:-uploads}
+  # Caddy proxy: listen address (no upstream default in Caddyfile -> must be set,
+  # else the `{$SITE_ADDRESS} { ... }` block is keyless and Caddy aborts) + trusted proxies
+  SITE_ADDRESS: ${SITE_ADDRESS:-:80}
+  TRUSTED_PROXIES: ${TRUSTED_PROXIES:-0.0.0.0/0}
 
 x-mq-env: &mq-env
   RABBITMQ_HOST: ${RABBITMQ_HOST:-plane-mq}
diff --git a/blueprints/plane/template.toml b/blueprints/plane/template.toml
index 902a382e..ac5f869a 100644
--- a/blueprints/plane/template.toml
+++ b/blueprints/plane/template.toml
@@ -45,6 +45,10 @@ env = [
   "AWS_S3_ENDPOINT_URL=http://plane-minio:9000",
   "AWS_S3_BUCKET_NAME=uploads",
   "FILE_SIZE_LIMIT=5242880",
+  # Caddy proxy listen address + trusted proxies (required by the plane-proxy Caddyfile;
+  # SITE_ADDRESS has no upstream default, so leaving it unset crashes the proxy)
+  "SITE_ADDRESS=:80",
+  "TRUSTED_PROXIES=0.0.0.0/0",
   "MINIO_ENDPOINT_SSL=0",
   "DEBUG=0",
   "GUNICORN_WORKERS=1",