diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml
index d74aef1b..7cbfd6bc 100644
--- a/.github/workflows/deploy.yml
+++ b/.github/workflows/deploy.yml
@@ -10,6 +10,8 @@ on:
       - staging/**
       - production
       - production/**
+  schedule:
+    - cron: "0 12 * * *"
 
 jobs:
   deploy:
@@ -44,4 +46,4 @@ jobs:
       with:
         push: true
         platforms: linux/amd64,linux/arm/v6,linux/arm/v7,linux/arm64/v8
-        tags: weejewel/wg-easy:v${{ env.VERSION }}, weejewel/wg-easy:${{ env.DOCKER_TAGS }}
\ No newline at end of file
+        tags: weejewel/wg-easy:v${{ env.VERSION }}, weejewel/wg-easy:${{ env.DOCKER_TAGS }}
diff --git a/README.md b/README.md
index 0974992d..02c25170 100644
--- a/README.md
+++ b/README.md
@@ -50,6 +50,8 @@ Change `WG_HOST=raspberrypi.local` to your server's public address, e.g. `WG_HOS
 
 Optionally, set a Web UI password by uncommenting `PASSWORD=foobar123` and change the password.
 
+> By default, any WireGuard client will have access to the Web UI, unless you set a password.
+
 ### 3. Run WireGuard
 
 Finally, run WireGuard. It will automatically start after a reboot.
diff --git a/docker-compose.yml b/docker-compose.yml
index 09ec7ff2..4a49fe0d 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -24,4 +24,5 @@ services:
       - NET_ADMIN
       - SYS_MODULE
     sysctls:
-      - net.ipv4.conf.all.src_valid_mark=1
\ No newline at end of file
+      - net.ipv4.ip_forward=1
+      - net.ipv4.conf.all.src_valid_mark=1