I think in the next year or 2 everyone will be https, I use lets encrypt on my lists and it works fine so I don't think that would be the cause. I suspect the issue is nginx reverse proxy, but I am not sure about the redirect issue you are seeing, I do recall basti wrote some code a long time...