diff --git a/ansible/roles/nova/templates/nova.conf.j2 b/ansible/roles/nova/templates/nova.conf.j2
index 67de78882c..606d7218cd 100644
--- a/ansible/roles/nova/templates/nova.conf.j2
+++ b/ansible/roles/nova/templates/nova.conf.j2
@@ -6,10 +6,6 @@ log_dir = /var/log/kolla/nova
 
 state_path = /var/lib/nova
 
-{% if kolla_enable_tls_external | bool %}
-secure_proxy_ssl_header = X-Forwarded-Proto
-{% endif %}
-
 osapi_compute_listen = {{ api_interface_address }}
 osapi_compute_listen_port = {{ nova_api_port }}
 osapi_compute_workers = {{ openstack_service_workers }}
@@ -221,6 +217,9 @@ debug = {{ nova_logging_debug }}
 
 [wsgi]
 api_paste_config = /etc/nova/api-paste.ini
+{% if kolla_enable_tls_external | bool %}
+secure_proxy_ssl_header = X-Forwarded-Proto
+{% endif %}
 
 [scheduler]
 max_attempts = 10