they should use stunnel modified to work with x-forward headers instead of nginx. nginx adds little benefit if you're only using it for the ssl part of request handling.

Agreed. I asked about that in October, they said:

"We still do not have any ETA on when that will be available. That being said I do not think we will have this ready anytime in the next couple of months."

I'm generally happy with EY Cloud, but it's still got some rough edges like this that should have been ironed out before they went out of beta.