diff --git a/docs/deployment.rst b/docs/deployment.rst
index 6e3024c..cb4fee4 100644
--- a/docs/deployment.rst
+++ b/docs/deployment.rst
@@ -13,3 +13,8 @@ Securing
 ========
 
 Nginx can be used to add protection via https, password, referrer, IP address restriction, access keys, etc.
+
+Running behind a proxy or a load-balancer
+=========================================
+
+If you need to run TileServer GL behind a proxy, make sure the proxy sends ``X-Forwarded-*`` headers to the server (most importantly ``X-Forwarded-Host`` and ``X-Forwaded-Proto``) to ensures the URLs generated inside TileJSON etc. are using the desired domain and protocol.