I reproduced a variation of this with Tomcat, but only the protocol was wrong this time (so it strongly feels like a Tomcat bug, or Debian tomcat package bug, since the proxy headers are properly taken into account for the host name and the port).
This message was sent by Atlassian Jira (v9.3.0#930000-sha1:287aeb6)
If image attachments aren't displayed, see this article.