Comment 17 for bug 1491579

I would much prefer a solution similar to Django:
https://docs.djangoproject.com/en/1.8/ref/settings/#secure-proxy-ssl-header

A special HTTP header (X-Forwarded-Proto) is used to tell the downstream application that upstream SSL termination is performed and that redirections should take that into account.

It offers much more flexibility where multiple DNS can point to the same Nova installation unlike the proposed public_endpoint config.