diff --git a/tests/e2e-ui/main.go b/tests/e2e-ui/main.go
index 37920782d7..dfd4cb2c4c 100644
--- a/tests/e2e-ui/main.go
+++ b/tests/e2e-ui/main.go
@@ -170,6 +170,10 @@ func main() {
 		// built-in bash: with the default "ask" (no accounts) every turn would
 		// wait for a card nobody answers. The UI specs stub the host commands.
 		config.WithChatsHostExec("off"),
+		// The specs that test a reverse proxy mount send X-Forwarded-Prefix
+		// from the browser, which reaches the server over loopback. The host
+		// believes the header only from a trusted proxy.
+		config.WithTrustedProxies("127.0.0.1/32,::1/128"),
 		config.EnableTracing,
 		config.EnableBackendLogging,
 	}