diff --git a/services/nginx.nix b/services/nginx.nix
index bca7871..7311b96 100644
--- a/services/nginx.nix
+++ b/services/nginx.nix
@@ -114,7 +114,14 @@ in
         "adguard.nordhammer.it"  = protectedProxy 3000;
         "profilarr.nordhammer.it" = protectedProxy 6868;
         "sabnzbd.nordhammer.it"  = protectedProxy 8085;
-        "code.nordhammer.it"     = protectedProxy 4444;
+        "code.nordhammer.it"     = lib.recursiveUpdate (protectedProxy 4444) {
+          locations."/".extraConfig = autheliaAuthConfig + ''
+            # Prevent browser from restoring a cached page on tab reopen —
+            # forces a fresh request so Authelia can redirect before JS
+            # tries to open a WebSocket with an expired session.
+            add_header Cache-Control "no-store" always;
+          '';
+        };
         "notes.nordhammer.it"    = protectedProxy 5230;
 
         # --- Local-only: serves update history JSON to Homepage's customapi widget ---