fix(nginx): добавить X-Forwarded-Proto для корректного HTTPS в bus-ссылках и QR
This commit is contained in:
@@ -19,6 +19,7 @@ server {
|
|||||||
proxy_set_header Upgrade $http_upgrade;
|
proxy_set_header Upgrade $http_upgrade;
|
||||||
proxy_set_header Connection 'upgrade';
|
proxy_set_header Connection 'upgrade';
|
||||||
proxy_set_header Host $http_host;
|
proxy_set_header Host $http_host;
|
||||||
|
proxy_set_header X-Forwarded-Proto $scheme;
|
||||||
proxy_set_header Authorization $http_authorization;
|
proxy_set_header Authorization $http_authorization;
|
||||||
proxy_cache_bypass $http_upgrade;
|
proxy_cache_bypass $http_upgrade;
|
||||||
proxy_connect_timeout 10s;
|
proxy_connect_timeout 10s;
|
||||||
@@ -33,6 +34,7 @@ server {
|
|||||||
proxy_set_header Upgrade $http_upgrade;
|
proxy_set_header Upgrade $http_upgrade;
|
||||||
proxy_set_header Connection 'upgrade';
|
proxy_set_header Connection 'upgrade';
|
||||||
proxy_set_header Host $http_host;
|
proxy_set_header Host $http_host;
|
||||||
|
proxy_set_header X-Forwarded-Proto $scheme;
|
||||||
proxy_cache_bypass $http_upgrade;
|
proxy_cache_bypass $http_upgrade;
|
||||||
proxy_connect_timeout 10s;
|
proxy_connect_timeout 10s;
|
||||||
proxy_send_timeout 650s;
|
proxy_send_timeout 650s;
|
||||||
|
|||||||
@@ -496,6 +496,7 @@ server {
|
|||||||
proxy_set_header Host \$http_host;
|
proxy_set_header Host \$http_host;
|
||||||
proxy_set_header X-Real-IP \$remote_addr;
|
proxy_set_header X-Real-IP \$remote_addr;
|
||||||
proxy_set_header X-Forwarded-For \$proxy_add_x_forwarded_for;
|
proxy_set_header X-Forwarded-For \$proxy_add_x_forwarded_for;
|
||||||
|
proxy_set_header X-Forwarded-Proto \$scheme;
|
||||||
proxy_connect_timeout 10s;
|
proxy_connect_timeout 10s;
|
||||||
proxy_send_timeout 650s;
|
proxy_send_timeout 650s;
|
||||||
proxy_read_timeout 650s;
|
proxy_read_timeout 650s;
|
||||||
@@ -505,6 +506,7 @@ server {
|
|||||||
proxy_set_header Host \$http_host;
|
proxy_set_header Host \$http_host;
|
||||||
proxy_set_header X-Real-IP \$remote_addr;
|
proxy_set_header X-Real-IP \$remote_addr;
|
||||||
proxy_set_header X-Forwarded-For \$proxy_add_x_forwarded_for;
|
proxy_set_header X-Forwarded-For \$proxy_add_x_forwarded_for;
|
||||||
|
proxy_set_header X-Forwarded-Proto \$scheme;
|
||||||
proxy_connect_timeout 10s;
|
proxy_connect_timeout 10s;
|
||||||
proxy_send_timeout 650s;
|
proxy_send_timeout 650s;
|
||||||
proxy_read_timeout 650s;
|
proxy_read_timeout 650s;
|
||||||
@@ -597,6 +599,7 @@ server {
|
|||||||
proxy_set_header Upgrade \$http_upgrade;
|
proxy_set_header Upgrade \$http_upgrade;
|
||||||
proxy_set_header Connection 'upgrade';
|
proxy_set_header Connection 'upgrade';
|
||||||
proxy_set_header Host \$http_host;
|
proxy_set_header Host \$http_host;
|
||||||
|
proxy_set_header X-Forwarded-Proto \$scheme;
|
||||||
proxy_cache_bypass \$http_upgrade;
|
proxy_cache_bypass \$http_upgrade;
|
||||||
proxy_set_header X-Real-IP \$remote_addr;
|
proxy_set_header X-Real-IP \$remote_addr;
|
||||||
proxy_set_header X-Forwarded-For \$proxy_add_x_forwarded_for;
|
proxy_set_header X-Forwarded-For \$proxy_add_x_forwarded_for;
|
||||||
@@ -610,6 +613,7 @@ server {
|
|||||||
proxy_set_header Upgrade \$http_upgrade;
|
proxy_set_header Upgrade \$http_upgrade;
|
||||||
proxy_set_header Connection 'upgrade';
|
proxy_set_header Connection 'upgrade';
|
||||||
proxy_set_header Host \$http_host;
|
proxy_set_header Host \$http_host;
|
||||||
|
proxy_set_header X-Forwarded-Proto \$scheme;
|
||||||
proxy_cache_bypass \$http_upgrade;
|
proxy_cache_bypass \$http_upgrade;
|
||||||
proxy_set_header X-Real-IP \$remote_addr;
|
proxy_set_header X-Real-IP \$remote_addr;
|
||||||
proxy_set_header X-Forwarded-For \$proxy_add_x_forwarded_for;
|
proxy_set_header X-Forwarded-For \$proxy_add_x_forwarded_for;
|
||||||
|
|||||||
@@ -224,6 +224,7 @@ ensure_nginx_api_timeouts() {
|
|||||||
print line
|
print line
|
||||||
|
|
||||||
if ((in_api || in_bus) && line ~ /proxy_set_header[[:space:]]+X-Forwarded-For[[:space:]]+/ && injected == 0) {
|
if ((in_api || in_bus) && line ~ /proxy_set_header[[:space:]]+X-Forwarded-For[[:space:]]+/ && injected == 0) {
|
||||||
|
print " proxy_set_header X-Forwarded-Proto $scheme;"
|
||||||
print " proxy_connect_timeout 10s;"
|
print " proxy_connect_timeout 10s;"
|
||||||
print " proxy_send_timeout 650s;"
|
print " proxy_send_timeout 650s;"
|
||||||
print " proxy_read_timeout 650s;"
|
print " proxy_read_timeout 650s;"
|
||||||
@@ -266,6 +267,7 @@ ensure_bus_location() {
|
|||||||
print " proxy_set_header Host $http_host;"
|
print " proxy_set_header Host $http_host;"
|
||||||
print " proxy_set_header X-Real-IP $remote_addr;"
|
print " proxy_set_header X-Real-IP $remote_addr;"
|
||||||
print " proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;"
|
print " proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;"
|
||||||
|
print " proxy_set_header X-Forwarded-Proto $scheme;"
|
||||||
print " proxy_connect_timeout 10s;"
|
print " proxy_connect_timeout 10s;"
|
||||||
print " proxy_send_timeout 650s;"
|
print " proxy_send_timeout 650s;"
|
||||||
print " proxy_read_timeout 650s;"
|
print " proxy_read_timeout 650s;"
|
||||||
|
|||||||
Reference in New Issue
Block a user