use x-forwarded-proto header set by reverse proxy