Well I am not forcing Discourse to ssl because I want to let my haproxy do it because haproxy passtrough does not work with http protocol to redirect GET requests, and i am handling multiple websites so i need http protocol in haproxy, so it requires ssl handling on haproxy side. I would like to avoid double ssl gateway.
So haproxy (on one lxc) listens 443: redirect to 8080 (no ssl) to my discourse container (lxc).
Curious is that the nginx-config-sample given in the discourse folder is configured without ssl and port 80, so it should work well, but i get the above mentioned problems.