found it!

add this file:

~/umbrel/app-data/btcpay-server/.env.app_proxy

add this line to file:

PROXY_TRUST_UPSTREAM=true

bounce btcpayserver:

~/umbrel/scripts/app restart btcpay-server