diff --git a/config/packages/security.yaml b/config/packages/security.yaml
index bbacc0e..3f86cbb 100644
--- a/config/packages/security.yaml
+++ b/config/packages/security.yaml
@@ -21,7 +21,8 @@ security:
                 path: app_security_logout
                 target: app_security_login
     access_control:
-        - { path: ^/profile, roles: ROLE_USER }
+        - { path: '^/profile', roles: ROLE_USER, requires_channel: https }
+        - { path: '^/', roles: PUBLIC_ACCESS, requires_channel: https }
 
 when@test:
     security: