tor: Accessing hidden url in tor browser throws security error
HTTPS for onion is not required for the purpose of encryption (though a certificate might be useful for identity and avoid phishing attacks). Apache server on FreedomBox redirects all http urls to https which is unnecessary for onion urls. Disable this redirection for onion urls only.