configure reverse proxy header for proper TLS

This commit is contained in:
Tobias Brunner 2025-03-28 10:50:07 +01:00
parent ddd1cd70ad
commit 05742d9f1c
No known key found for this signature in database
2 changed files with 8 additions and 1 deletions

View file

@ -42,7 +42,10 @@
# Proxy all other requests to Gunicorn # Proxy all other requests to Gunicorn
handle { handle {
reverse_proxy unix//app/run/gunicorn.sock reverse_proxy unix//app/run/gunicorn.sock {
header_up X-Forwarded-Proto https
header_up X-Forwarded-Host {host}
}
} }
# Basic compression for better performance # Basic compression for better performance

View file

@ -55,6 +55,10 @@ CSRF_TRUSTED_ORIGINS = [f"https://{h}" for h in HTTPS_HOSTS] + [
# Primary website URL # Primary website URL
WEBSITE_URL = env.str("WEBSITE_URL", default="https://servala.com") WEBSITE_URL = env.str("WEBSITE_URL", default="https://servala.com")
SECURE_PROXY_SSL_HEADER = ("HTTP_X_FORWARDED_PROTO", "https")
USE_X_FORWARDED_HOST = True
USE_X_FORWARDED_PORT = True
# Application definition # Application definition
INSTALLED_APPS = [ INSTALLED_APPS = [