13.4 > 13.5 now 502 error on update of latest CE - permissions error but I havent changed those :(

Your SSL looks fine to me from visiting the url. I expect it’s more likely to do with the proxy stuff trying to redirect to something that isn’t running.

Can you check output from: gitlab-ctl status to make sure all services are running?

Also, are you running selinux? Do you have all required selinux packages installed?