Modify code to allow http only connections

okeneo · Apr 18, 2024 · 9262a35 · 9262a35
1 parent 3f9ff5d
commit 9262a35
Showing 1 changed file with 13 additions and 3 deletions.
diff --git a/nginx/default-no-ssl.prod.conf.tpl b/nginx/default-no-ssl.prod.conf.tpl
@@ -7,12 +7,22 @@ server {
     server_name ${DOMAIN} www.${DOMAIN};
     server_tokens off;
 
-    client_max_body_size 10M;
-
     location /.well-known/acme-challenge/ {
         root /var/www/certbot;
     }
 
+    location / {
+        return 301 http://${DOMAIN}$request_uri;
+    }
+}
+
+server {
+    listen 80;
+    server_name ${DOMAIN};
+    server_tokens off;
+
+    client_max_body_size 10M;
+
     location / {
         alias /var/www/frontend/;
         try_files $uri $uri/ /index.html;
@@ -27,7 +37,7 @@ server {
         proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
         proxy_set_header Host $host;
         proxy_redirect off;
-        proxy_set_header X-Forwarded-Proto https;
+        proxy_set_header X-Forwarded-Proto http;
         proxy_set_header X-Url-Scheme $scheme;
     }