Without TrustProxies, Laravel generated http:// links after TLS termination and browsers blocked CSS/JS as mixed content.