diff --git a/src/pages/manage/reverse-proxy/index.mdx b/src/pages/manage/reverse-proxy/index.mdx
index aeb1d83ef..6e39d6aad 100644
--- a/src/pages/manage/reverse-proxy/index.mdx
+++ b/src/pages/manage/reverse-proxy/index.mdx
@@ -13,9 +13,9 @@ NetBird Reverse Proxy lets you expose internal services running on peers or behi
 <Note>
     **Self-hosted requirement:** Self-hosted deployments **must** use [Traefik](/selfhosted/external-reverse-proxy) as their external reverse proxy. Traefik is the only supported reverse proxy that provides TLS passthrough, which is required for the Reverse Proxy feature to function correctly.
 </Note>
-<Warning>
-    The Reverse Proxy feature does not currently support Rosenpass. If your network relies on this feature, reverse proxy services will not function as expected.
-</Warning>
+<Note>
+    **Rosenpass:** The Reverse Proxy works with [Rosenpass](/client/post-quantum-cryptography)-enabled peers. The proxy runs Rosenpass in permissive mode, establishing a post-quantum-secured tunnel with peers that have Rosenpass enabled and falling back to standard WireGuard for peers that do not. Self-hosted deployments can turn this off with `NB_PROXY_ROSENPASS=false` on the proxy, but then Rosenpass-enabled peers cannot be reached through the proxy.
+</Note>
 
 ## How it works