Spyke

Syndicated from the fediverse. Read and engage on the original instance.

View original on lemmy.world

15 replies

Ruud
lemmy.world

Yes that’s on my to do list. I’ll do that today.

7
WhoRoger
lemmy.world

Don't all modern browsers try https by default?

(Not that I disagree.)

6
animistreply
lemmy.one

Every time I set up FF on a new install I have to choose always on https

2
Ruud
lemmy.world

Hmm , when I replace this:

http {
  server {
    listen 80;
    server_name lemmy.world;

    location / {
        proxy_pass http://lemmy-ui:1234;
        proxy_set_header Host $host;
    }
}

with this:

http {
  server {
    listen 80;
    server_name lemmy.world;

    location / {
        return 301 https://$host$request_uri;
    }
}

it breaks, gives 502 when visiting the site...

ideas? (I'm not that much into nginx...)

4
𝒍𝒆𝒎𝒂𝒏𝒏reply
lemmy.one

You could try this

this config snippet is assuming thet you've already got the TLS cert/pem file for lemmy.world elsewhere in your nginx.config

http {
  server {
    listen 80;
    listen 443 ssl;
    server_name lemmy.world;

    if ($scheme = "http") {
        return 307 https://$host$request_uri;
    }

    location / {
        proxy_pass http://lemmy-ui:1234;
        proxy_set_header Host $host;
    }
}

If you get redirected to lemmy.world:1234, then add absolute_redirect off; in the 'server' block

Last thing - 307 is a temporary redirect, you might to change it to a permanent one once you've confirmed it's working as intended

3
Slashzeroreply
lemmy.world

You might want to add the secure port (:443) in your redirect. Otherwise it might be trying to load https on port 80 still, which can’t work.

  • http: port 80
  • https: port 443

Notes:

  • just a guess. I haven’t looked at an nginx config in a while
  • make sure to try on multiple browsers as they all don’t behave the same way
1
Ruudreply
lemmy.world

This piece I've pasted above isn't the whole nginx.conf, there's also a large block for the 443 traffic. It's just the http traffic that I need to redirect to 443.

1
Slashzeroreply
lemmy.world

Ok. Now that I think about it, you shouldn’t have to specify the port.

1
CannaVet
lemmy.world

I've been on the secure version by default so far myself.

3
Ruudreply
lemmy.world

Yes most browsers automatically do, but some don't..

2
CannaVetreply
lemmy.world

Oooh I thought it was a backend thing, cause my NGINX has a force SSL option. I guess it can be done from either end.

1

You reached the end