Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

reverse proxy ssl static links in the pages still http #116

Open
hagbard-01 opened this issue Mar 7, 2022 · 0 comments
Open

reverse proxy ssl static links in the pages still http #116

hagbard-01 opened this issue Mar 7, 2022 · 0 comments
Labels
bug Something isn't working

Comments

@hagbard-01
Copy link

hagbard-01 commented Mar 7, 2022

Describe the bug
I use nginx as reverse proxy and redirect all traffic to https.
The sign up form ("Create admin account") has however, http statically rendered in the code and all creds will be submitted unencrypted.

ln 39: <form action="[http://<IP-address>/signup?next=%2Fdashboard](view-source:http://<IP-address>/signup?next=%2Fdashboard)" method="[post]()" novalidate>

To Reproduce
Steps to reproduce the behavior:
Use a reverse proxy such as nginx and redirect all traffic on port 80, to port 443.

server {
    listen 80 default_server;
    server_name _;
    return 301 https://$host$request_uri;
}
server {
    listen 443 ssl;
    server_name _;
    ssl_certificate /etc/nginx/ssl/linguard.crt;
    ssl_certificate_key /etc/nginx/ssl/linguard.key;
    ssl_protocols TLSv1.2 TLSv1.3;
    location / {
        proxy_set_header Host $host;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_pass http://127.0.0.1:8080;
    }
}

Expected behavior
Well, either it has to be a relative link or needs to be:

@hagbard-01 hagbard-01 added the bug Something isn't working label Mar 7, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working
Projects
None yet
Development

No branches or pull requests

1 participant