Unable to self host on other port than 443 without loosing TLS, preventing host of reverse proxy

When I host appwrite on any port other than 443 I get a self signed certificate which isn't good in a production setting. The same server is hosting other web services so its necessary that nginx proxies to appwrite. I've tried proxying traffic, giving Traeifik a trusted IP for nginx to appwrite, but I still receive a self signed signature.