diff --git a/Caddyfile b/Caddyfile
index e190745..34426ce 100644
--- a/Caddyfile
+++ b/Caddyfile
@@ -9,7 +9,7 @@
 	# TLS Options
 	email {$ISSUER_ADDRESS}
 	acme_ca {$ACME_CA_ENDPOINT:https://acme-v02.api.letsencrypt.org/directory}
-	auto_https disable_redirects
+	# auto_https disable_redirects
 	key_type rsa2048
 
 	# Server Options
diff --git a/vhosts/1api.enabled b/vhosts/1api.enabled
index 59d1094..75be093 100644
--- a/vhosts/1api.enabled
+++ b/vhosts/1api.enabled
@@ -90,13 +90,15 @@
 	}
 
 	route @boxes_whitelist {
-		# no ratelimit for whitelisted ips
+		# higher ratelimit for whitelisted ips
+		import ratelimit 300 "1m"
 
 		reverse_proxy api:8000
 	}
 
 	route @boxes_whitelist_token {
-		# no ratelimit for whitelisted tokens
+		# higher ratelimit for whitelisted ips
+		import ratelimit 300 "1m"
 
 		reverse_proxy api:8000
 	}
@@ -141,7 +143,8 @@ http://{$INGRESS_DOMAIN} {
 	}
 
 	route @boxes_whitelist_token {
-		# no ratelimit for whitelisted tokens
+		# higher ratelimit for whitelisted ips
+		import ratelimit 300 "1m"
 
 		reverse_proxy api:8000
 	}