diff --git a/stack-proxy-global.yml b/stack-proxy-global.yml
index 43ec8a3..a4dc0e3 100644
--- a/stack-proxy-global.yml
+++ b/stack-proxy-global.yml
@@ -138,3 +138,5 @@ networks:
     name: proxy
   traefik-private:
     driver: overlay
+    driver_opts:
+      encrypted: true # since we're passing SSL certs and docker socket stuff over TCP, lets IPSec