We have been using WHD internally in our IT department for a while, but recently notified all of our users of the portal with the intention that they can sign in and manage their tickets. Clients are already existing, as they have been entered by IT for internal use prior to now. While publishing it for access externally we implemented an Apache reverse-proxy to enable easy LetsEncrypt HTTPS certificate management. After launch we want Clients to be able to reset their password so they can log in, so we are using 443 as the custom HTTPS port for outbound links and that appears to be generating the correct address in the outbound emails. At this time the normal WHD interface is working perfectly, both local on the server via HTTP or HTTPS as well as via the proxy which is operating using the HTTP version of the site on the back end.
The problem is that any attempts to access the "https://servername/helpdesk/components/passwordreset/?id=fe08d69c-667b-4ad6-a27b-4c95575ea645" formatted link result in a 403 error. Following the WHD support page on 403 errors appears to indicate that the Default Port and/or Link Port values may need to be adjusted, but that does not appear relevant to our situation as all other aspects of the site are working as intended just not the password reset link. For the same reason the proxy does not appear to be the source of the issue, as the http://localhost:httpport address as well as the https://localhost:httpsport address also function entirely normally except for the 403 error to the password reset link.
Anyone have any tips of places to look?