If `HTTPS_PORT` is different from 443, the redirect location is wrong - it should append the `config.HttpsPort` here if it's not 443: https://github.com/basecamp/thruster/blob/main/internal/server.go#L148-L153