diff --git a/tools/dev-deploy/Caddyfile.dev b/tools/dev-deploy/Caddyfile.dev
index 64758b7..eb949a1 100644
--- a/tools/dev-deploy/Caddyfile.dev
+++ b/tools/dev-deploy/Caddyfile.dev
@@ -20,6 +20,15 @@
 
     @api host api.galaxy.lan
     handle @api {
+        # Connect-Web (authenticated) lives on a separate listener
+        # (`GATEWAY_AUTHENTICATED_GRPC_ADDR=:9090`). Anything else —
+        # public auth, healthz — is the public REST listener on
+        # `:8080`. The split mirrors the Vite dev-server proxy in
+        # `ui/frontend/vite.config.ts`.
+        @connect path /galaxy.gateway.v1.EdgeGateway/*
+        handle @connect {
+            reverse_proxy galaxy-api:9090
+        }
         reverse_proxy galaxy-api:8080
     }
 }