diff --git a/CHANGELOG.md b/CHANGELOG.md
index 1b1f23aa..411028bf 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -8,6 +8,8 @@
 
 ## Changes since v7.1.0
 
+- [#1133](https://github.com/oauth2-proxy/oauth2-proxy/pull/1133) Metrics server should be constructed with secure bind address for TLS (@JoelSpeed)
+
 # V7.1.0
 
 ## Release Highlights
diff --git a/oauthproxy.go b/oauthproxy.go
index 6415ef6a..ec7b3b7b 100644
--- a/oauthproxy.go
+++ b/oauthproxy.go
@@ -274,7 +274,7 @@ func (p *OAuthProxy) setupServer(opts *options.Options) error {
 	metricsServer, err := proxyhttp.NewServer(proxyhttp.Opts{
 		Handler:           middleware.DefaultMetricsHandler,
 		BindAddress:       opts.MetricsServer.BindAddress,
-		SecureBindAddress: opts.MetricsServer.BindAddress,
+		SecureBindAddress: opts.MetricsServer.SecureBindAddress,
 		TLS:               opts.MetricsServer.TLS,
 	})
 	if err != nil {