Much thanks to #haproxy who pointed out I was missing a port specifier.
Clean up options a bit.
Inject x-forwarded-proto