Just an update to say I followed @Falco’s advice:
and added:
reqadd X-Forwarded-Proto:\ https if { ssl_fc }
to the frontend http-in in Haproxy and it seems to be working now ![]()
(I already had option forwardfor which is the same as X-Forwarded-For)
Thanks everyone! ![]()