diff --git a/caddyfile.go b/caddyfile.go
index 0e94cc3..a0b438e 100644
--- a/caddyfile.go
+++ b/caddyfile.go
@@ -8,8 +8,12 @@ import (
 	"github.com/caddyserver/caddy/v2/modules/caddyhttp/caddyauth"
 )
 
+const directiveName = "tailscale_auth"
+
 func init() {
-	httpcaddyfile.RegisterHandlerDirective("tailscale_auth", parseCaddyfile)
+	httpcaddyfile.RegisterHandlerDirective(directiveName, parseCaddyfile)
+	httpcaddyfile.RegisterDirectiveOrder(directiveName, httpcaddyfile.After, "basic_auth")
+
 }
 
 // parseCaddyfile sets up the handler from Caddyfile tokens. Syntax: