🚧 ssl okay

proxy_set_header X-Forwarded-Proto https

Author: JulienChampagnol

Dockerfile

@@ -3,6 +3,7 @@ COPY nginx.conf /etc/nginx/nginx.conf
 
 RUN \
     apk add openssl && \
-    openssl req -x509 -nodes -days 365 -newkey rsa:2048 -keyout /etc/ssl/private/nginx.key -out /etc/ssl/certs/nginx.crt
+    openssl req -x509 -nodes -days 365 -newkey rsa:2048 -keyout /etc/nginx/nginx.key -out /etc/nginx/nginx.crt -subj "/C=FR/ST=France/L=Pau/O=Geode-solutions"
+
 
 EXPOSE 443

nginx.conf

@@ -12,6 +12,7 @@ http {
   server {
     listen 443 ssl;
     server_name localhost;
+
     ssl_certificate nginx.crt;
     ssl_certificate_key nginx.key;
 
@@ -20,17 +21,25 @@ http {
         return 405;
       }
       rewrite "^/[a-z0-9]{32}/geode/(.*)" /$1 break;
-      proxy_pass https://localhost:5000;
+      proxy_pass http://localhost:5000;
       proxy_http_version 1.1;
+      proxy_set_header Host $host;
+      proxy_set_header X-Real-IP $remote_addr;
+      proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+      proxy_set_header X-Forwarded-Proto https;
     }
 
     location ~ "^/[a-z0-9]{32}/viewer/" {
       if ($request_method !~ ^(GET|POST|OPTIONS)$) {
         return 405;
       }
       rewrite "^/[a-z0-9]{32}/viewer/(.*)" /$1 break;
-      proxy_pass https://localhost:1234;
+      proxy_pass http://localhost:1234;
       proxy_http_version 1.1;
+      proxy_set_header Host $host;
+      proxy_set_header X-Real-IP $remote_addr;
+      proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+      proxy_set_header X-Forwarded-Proto https;
     }
   }
 }