From 45af3a479164026087e07a9af9c61adc66c64933 Mon Sep 17 00:00:00 2001
From: Simon Li <spli@dundee.ac.uk>
Date: Wed, 11 Sep 2019 15:25:02 +0100
Subject: [PATCH] OMERO.web: obtain external scheme from
 HTTP_X_FORWARDED_PROTO_WEB_PROXY

If OMERO.web is behind multiple (possible insecure) nginx proxies this header can be set by the front-end proxy to indicate the scheme
---
 home/jobs/OMERO-web/config.xml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/home/jobs/OMERO-web/config.xml b/home/jobs/OMERO-web/config.xml
index a1a27d21..fe6ce84c 100644
--- a/home/jobs/OMERO-web/config.xml
+++ b/home/jobs/OMERO-web/config.xml
@@ -96,6 +96,8 @@ $OMERO_DIST/bin/omero config set omero.web.prefix $WEB_PREFIX
 $OMERO_DIST/bin/omero config set omero.web.static_url $WEB_PREFIX&apos;/static/&apos;
 $OMERO_DIST/bin/omero config set omero.web.static_root $HOME&apos;/static/web/&apos;
 
+$OMERO_DIST/bin/omero config set omero.web.secure_proxy_ssl_header &apos;[&quot;HTTP_X_FORWARDED_PROTO_WEB_PROXY&quot;, &quot;https&quot;]&apos;
+
 $OMERO_DIST/bin/omero config set omero.web.session_engine &apos;django.contrib.sessions.backends.cache&apos;
 $OMERO_DIST/bin/omero config set omero.web.caches &apos;{&quot;default&quot;: {&quot;BACKEND&quot;: &quot;django_redis.cache.RedisCache&quot;,&quot;LOCATION&quot;: &quot;redis://redis:6379/0&quot;}}&apos;