It sits behind the proxy that terminates TLS, so it believes it is serving plain HTTP. Asked for /home/gallery/16 it correctly redirects to the directory and wrote the Location as http://host/home/gallery/16/ — downgrading an HTTPS visitor to HTTP for a round trip before the proxy sent them back where they came from. absolute_redirect off emits just the path, and the browser keeps the scheme it already had. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>