-
Notifications
You must be signed in to change notification settings - Fork 1.3k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Commonly suggested Docker configuration fails to take into account Traefik TLS termination, leads to HTTP URLs being shown to users #1381
Comments
Send PR if it solves the issue |
I've already included a patch, but my understanding is that my fix would break other configurations (Like ones without a frontend proxy). So I'm leaving this here for maintainers to consider it (or not). |
recently i came accross an bug in frappe builder where the browser blocks some js and css of the webpage build in builder as it uses http instead of https (bug related to these the fix mentioned in this issue fixed it |
This issue has been automatically marked as stale. You have a week to explain why you believe this is an error. |
Description of the issue
The nginx template sets the
X-Forwarded-Proto
header to$scheme
, which is HTTP when Nginx is used as a HTTP frontend while Traefik does TLS termination.This renders some URLs (like password resets and OpenID connections redirect URIs) being HTTP instead of HTTPS as intended.
There are probably some workarounds to this, however the core issue seems to be that wrong information is given to the backend in
nginx-template.conf
.$scheme
is correct$http_x_forwarded_proto;
Context information (for bug reports)
Here's a patch that I have only tested in HTTPS (so it may break HTTP):
Steps to reproduce the issue
Observed result
Some URIs like password resets and OpenID redirects are HTTP
Expected result
Those URIs should be using the same protocol as the frontend, which could (but isn't necessarily!) HTTPS.
The text was updated successfully, but these errors were encountered: