nginx: add X-Forwarded-Proto