diff --git a/plinth/modules/deluge/data/etc/apache2/conf-available/deluge-plinth.conf b/plinth/modules/deluge/data/etc/apache2/conf-available/deluge-plinth.conf
index 76c92049e..f89dd42a2 100644
--- a/plinth/modules/deluge/data/etc/apache2/conf-available/deluge-plinth.conf
+++ b/plinth/modules/deluge/data/etc/apache2/conf-available/deluge-plinth.conf
@@ -1,6 +1,18 @@
 ##
 ## On all sites, provide Deluge on a default path: /deluge
 ##
+## Requires the following Apache modules to be enabled:
+##   mod_headers
+##   mod_proxy
+##   mod_proxy_http
+##
 <Location /deluge>
-        ProxyPass http://localhost:8112
+    ProxyPass   http://localhost:8112
+    Include     includes/freedombox-single-sign-on.conf
+    <IfModule mod_auth_pubtkt.c>
+        TKTAuthToken "admin" "bit-torrent"
+    </IfModule>
+    ## Send the scheme from user's request to enable Deluge to redirect URLs,
+    ## set cookies, set absolute URLs (if any) properly.
+    RequestHeader    set X-Forwarded-Proto 'https' env=HTTPS
 </Location>