i usualy just use the optional nethserver reverse proxy set name to glpi.domain.tld and destination to http://domain.tld/glpi tick options Require SSL encrypted connection, Accept invalid SSL certificate from target and leave the last option unticked