I’m still investigating why I cannot login anymore since the last upgrade, with force_https=true.
As I read your comments on meta discourse, I guess we have slightly the same networking configuration
(A VM which is exposed behind a firewall/proxy, and a docker container which runs discourse).
But I keep having this “Can’t verify CSRF authentication …” error (https://meta.discourse.org/t/moved-site-behind-proxy-favicon-and-header-not-using-https-anymore/131486/7?u=rossierd)
And I’ve no (serious) support from Discourse’s team about that.
Finally, how did you solve your issue? (by the way, your logo at top left doesn’t show up correctly on mobile).