Hello from ALB behind ANF (normal case: same domain, public ACM cert on backend)