don't set proxy_redirect off, since that's the default anyway, and we may actually want to set this ourselves