[gituliar]

My guess: https hits HAProxy from external world, afterwards all is just http. There is no need to encrypt internal trafic.

[sdevonoes]

Sure, but then why use WireGuard to encrypt http internal traffic if one can just let the internal traffic be https :D