diff --git a/docker-compose.yml b/docker-compose.yml
index d7c36dd..70b04d0 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -32,12 +32,23 @@ services:
       # Service
       - "traefik.http.services.${APP_NAME}.loadbalancer.server.port=3000"
 
-      # Router principal con Authentik Forward Auth
+      # Router para assets estáticos de Nuxt (sin autenticación) - mayor prioridad
+      # SOLO /_nuxt/* para que la aplicación funcione
+      - "traefik.http.routers.${APP_NAME}-public.rule=Host(`${APP_DOMAIN}`) && PathPrefix(`/_nuxt`)"
+      - "traefik.http.routers.${APP_NAME}-public.entrypoints=websecure"
+      - "traefik.http.routers.${APP_NAME}-public.tls=true"
+      - "traefik.http.routers.${APP_NAME}-public.tls.certresolver=letsencrypt"
+      - "traefik.http.routers.${APP_NAME}-public.service=${APP_NAME}"
+      - "traefik.http.routers.${APP_NAME}-public.priority=100"
+      - "traefik.http.routers.${APP_NAME}-public.middlewares=${APP_NAME}-headers"
+
+      # Router principal con Authentik Forward Auth (menor prioridad)
       - "traefik.http.routers.${APP_NAME}.rule=Host(`${APP_DOMAIN}`)"
       - "traefik.http.routers.${APP_NAME}.entrypoints=websecure"
       - "traefik.http.routers.${APP_NAME}.tls=true"
       - "traefik.http.routers.${APP_NAME}.tls.certresolver=letsencrypt"
       - "traefik.http.routers.${APP_NAME}.service=${APP_NAME}"
+      - "traefik.http.routers.${APP_NAME}.priority=50"
       - "traefik.http.routers.${APP_NAME}.middlewares=authentik-forward-auth@file,${APP_NAME}-headers"
 
       # Custom headers middleware