If you aren’t encapsulating https in docker there’s no need to expose 443 at all. Your proxy can forward that.