the node holders were just causing issues, we have no need for them currently, so we can just set the secure proxy URL through FORWARD_DESTINATION. less complexity for the cluster and self-hosters too