diff --git a/config/ha-reference/node1/config/traefik/traefik_config.yml b/config/ha-reference/node1/config/traefik/traefik_config.yml
index ebe178f70..ad626dc34 100644
--- a/config/ha-reference/node1/config/traefik/traefik_config.yml
+++ b/config/ha-reference/node1/config/traefik/traefik_config.yml
@@ -22,7 +22,7 @@ entryPoints:
     address: ":80"
   websecure:
     address: ":443"
-    proxyProtocol: # Just accept everything for now!
+    proxyProtocol: # We trust gerbil upstream
       trustedIPs:
         - 0.0.0.0/0
         - ::1/128
diff --git a/config/ha-reference/node2/config/traefik/traefik_config.yml b/config/ha-reference/node2/config/traefik/traefik_config.yml
index ebe178f70..ad626dc34 100644
--- a/config/ha-reference/node2/config/traefik/traefik_config.yml
+++ b/config/ha-reference/node2/config/traefik/traefik_config.yml
@@ -22,7 +22,7 @@ entryPoints:
     address: ":80"
   websecure:
     address: ":443"
-    proxyProtocol: # Just accept everything for now!
+    proxyProtocol: # We trust gerbil upstream
       trustedIPs:
         - 0.0.0.0/0
         - ::1/128