Yeah, the current ControllerConf clearly is designed for a LB termination. The config allows to configure Swagger with https but the actual server ignores that setting.