diff --git a/config/root/etc/nginx/token_server.conf b/config/root/etc/nginx/token_server.conf
index a49f3a3e..057cade5 100644
--- a/config/root/etc/nginx/token_server.conf
+++ b/config/root/etc/nginx/token_server.conf
@@ -11,8 +11,18 @@ server {
     # Server domain name
     server_name _;
 
+    set_by_lua_block $pot_url_scheme {
+        local haystack = os.getenv('YT_POT_BGUTIL_BASE_URL') or ''
+        local needle = 'https://'
+        local scheme = 'http'
+        if haystack:sub(1, #needle) == needle then
+            scheme = 'https'
+        end
+        return scheme
+    }
+
     location / {
-        proxy_pass http://token_server;
+        proxy_pass $pot_url_scheme://token_server;
         proxy_redirect default;
     }
 }