bq. It is the RequestHeader set Forwarded "proto=https" line which needs to be present, right?
Yes.
What I can tell you is that the Connector scheme is not set at all in myxwiki.org and xwiki.org (they are using Apache and Tomcat 9) for example, and they don't have the problem you describe.
This message was sent by Atlassian Jira (v9.3.0#930000-sha1:287aeb6)
If image attachments aren't displayed, see this article.
