HTTPS reverse-proxy for portal, api, leaf, zap, staff, iam, login, cs, sales, acct, mw, and fleet. Staff HTML login redirects use X-Forwarded-Proto so next= is https on the public host.
