My guess: https hits HAProxy from external world, afterwards all is just http. There is no need to encrypt internal trafic.