diff --git a/docs/images/docker-kimai.md b/docs/images/docker-kimai.md
index a72aa4b3e7..bf22c54f4d 100755
--- a/docs/images/docker-kimai.md
+++ b/docs/images/docker-kimai.md
@@ -97,6 +97,7 @@ services:
       - PGID=1000
       - TZ=Etc/UTC
       - DATABASE_URL=mysql://your_db_user:your_db_pass@your_db_host:3306/your_db_name?charset=your_db_charset&serverVersion=your_db_version
+      - TRUSTED_PROXIES=127.0.0.1/32 #optional
     volumes:
       - /path/to/kimai/config:/config
     ports:
@@ -134,6 +135,7 @@ docker run -d \
   -e PGID=1000 \
   -e TZ=Etc/UTC \
   -e DATABASE_URL=mysql://your_db_user:your_db_pass@your_db_host:3306/your_db_name?charset=your_db_charset&serverVersion=your_db_version \
+  -e TRUSTED_PROXIES=127.0.0.1/32 `#optional` \
   -p 80:80 \
   -p 443:443 \
   -v /path/to/kimai/config:/config \
@@ -176,6 +178,7 @@ Containers are configured using parameters passed at runtime (such as those abov
 | `PGID=1000` | for GroupID - see below for explanation |
 | `TZ=Etc/UTC` | specify a timezone to use, see this [list](https://en.wikipedia.org/wiki/List_of_tz_database_time_zones#List). |
 | `DATABASE_URL=mysql://your_db_user:your_db_pass@your_db_host:3306/your_db_name?charset=your_db_charset&serverVersion=your_db_version` | Configure your database connection, see Application Setup instructions. |
+| `TRUSTED_PROXIES=127.0.0.1/32` | If behind a reverse proxy set this to its IP or network CIDR so that Kimai trusts its headers. |
 
 ### Volume Mappings (`-v`)