Thanks for the help. It turns out I *did* forget to add the
X-Forwarded-Proto header to the proxy after all.
In case anyone encounters the same problem, for Apache 2, add the line "RequestHeader set X-Forwarded-Proto https" to default-000-le-ssl.conf.
Thanks again for your assistance.
Regards,
Minh