Curling localhost without X-Forwarded-Proto always yields http:// URLs even when trustProxies is correct behind Caddy.