Traefik → container hop in the rSpace stack sets x-forwarded-proto: http even when the real client request is https. That was leaking into the "Open in <rApp>" links emitted in chronicle.mw. Simplify: any non-local host gets https, period.
