Hm… This looks similar to the following older post:
I think you really only want protocol = 'https' in the unusual case of when your own web app is handling SSL itself (instead of letting the Fly edge proxy handle it).
(A lot of the settings in fly.toml look at things from the Fly edge proxy’s perspective.)