this is done because otherwise cluster internal traffic will not work due to kube-proxy short circuiting and nginx requiring either every request, or no request, use proxy protocol