diff --git a/dashcaddy-api/routes/services.js b/dashcaddy-api/routes/services.js
index 726214d..ec5676f 100644
--- a/dashcaddy-api/routes/services.js
+++ b/dashcaddy-api/routes/services.js
@@ -54,7 +54,8 @@ module.exports = function({
     const caCert = fs.readFileSync(CA_CERT_PATH);
     probeHttpsAgent = new https.Agent({ ca: [...tls.rootCertificates, caCert] });
   } catch (_) {
-    probeHttpsAgent = new https.Agent();
+    // CA cert not available — trust self-signed certs so probes still work
+    probeHttpsAgent = new https.Agent({ rejectUnauthorized: false });
   }
 
   function isServiceUp(statusCode) {