## Problem
Deploying Logto v1.6.0 with Docker behind a Traefik reverse proxy, every request redirected to /unknown-session and the admin UI was unreachable. Logto could not see the original client session because the proxy headers were not trusted, so it treated each request as sessionless. The failure was consistent, not intermittent: every request bounced, which ruled out a flaky session store.
## Verified fix
Set TRUST_PROXY_HEADER to true in the Logto container environment so it honors the X-Forwarded headers from Traefik; reporters confirmed this restored access to the admin UI. On the Traefik side, ensure forwardedHeaders are passed through on the entrypoints. Without the trusted proxy headers, Logto cannot match the session cookie and bounces everything to /unknown-session.
Source: https://github.com/logto-io/logto/issues/4279