Reverse proxy to docker daemon api: "Client sent an HTTP request to an HTTPS server"

You probably need to specify https:// ?

I don’t know anything about Docker’s -H flag, I’ve never used it.

I don’t know anything about the Docker API, but please read The "subfolder problem", OR, "why can't I reverse proxy my app into a subfolder?", you may have an easier time by using subdomains instead of subpaths for each, to avoid messing around with URLs.

Also you only used /aorta/docker as your path matcher, which will only match exactly that path and nothing else, so you might need to add a * as a suffix to match paths below that.