diff --git a/config/prod.exs b/config/prod.exs
index 51a307b..5ee751b 100644
--- a/config/prod.exs
+++ b/config/prod.exs
@@ -9,7 +9,12 @@ config :berrypod, BerrypodWeb.Endpoint,
   cache_static_manifest: "priv/static/cache_manifest.json",
   # HSTS tells browsers to always use HTTPS for this domain (1 year, include subdomains)
   # This must be set at compile time, not runtime
-  force_ssl: [hsts: true, rewrite_on: [:x_forwarded_proto]]
+  # Exclude /health for Fly.io internal health checks (made over HTTP)
+  force_ssl: [
+    hsts: true,
+    rewrite_on: [:x_forwarded_proto],
+    exclude: [hosts: ["localhost", "127.0.0.1"], paths: ["/health"]]
+  ]
 
 # Configures Swoosh API Client
 config :swoosh, api_client: Swoosh.ApiClient.Req