Merge pull request #5438 from pulibrary/rdss-https2

[NGINX] adding https stanza to other RDSS applications
pulibrary · Oct 10, 2024 · 9bf20da · 9bf20da
2 parents 335142f + f5a5371
commit 9bf20da
Show file tree

Hide file tree

Showing 7 changed files with 9 additions and 0 deletions.
diff --git a/roles/nginxplus/files/conf/http/dev/tigerdata_staging.conf b/roles/nginxplus/files/conf/http/dev/tigerdata_staging.conf
@@ -28,6 +28,7 @@ server {
         proxy_set_header Connection $connection_upgrade;
         proxy_set_header X-Forwarded-Host $host;
         proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-Proto https;
     }
 
     location / {
@@ -53,6 +54,7 @@ server {
         proxy_set_header Connection $connection_upgrade;
         proxy_set_header X-Forwarded-Host $host;
         proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-Proto https;
     }
 
     location / {

diff --git a/roles/nginxplus/files/conf/http/oawaiver-prod.conf b/roles/nginxplus/files/conf/http/oawaiver-prod.conf
@@ -42,6 +42,7 @@ server {
         proxy_pass http://oawaiver-prod;
         proxy_set_header X-Forwarded-Host $host;
         proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-Proto https;
         proxy_cache oawaiver-prodcache;
         # handle errors using errors.conf
         proxy_intercept_errors on;

diff --git a/roles/nginxplus/files/conf/http/oawaiver-staging.conf b/roles/nginxplus/files/conf/http/oawaiver-staging.conf
@@ -35,6 +35,7 @@ server {
         proxy_pass http://oawaiver-staging;
         proxy_set_header X-Forwarded-Host $host;
         proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-Proto https;
         proxy_cache oawaiver-stagingcache;
         # handle errors using errors.conf
         proxy_intercept_errors on;

diff --git a/roles/nginxplus/files/conf/http/orcid_prod.conf b/roles/nginxplus/files/conf/http/orcid_prod.conf
@@ -75,6 +75,7 @@ server {
         proxy_pass http://orcid-prod;
         proxy_set_header X-Forwarded-Host $host;
         proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-Proto https;
         proxy_cache pdc-orcid-prodcache;
         # handle errors using errors.conf
         proxy_intercept_errors on;

diff --git a/roles/nginxplus/files/conf/http/orcid_staging.conf b/roles/nginxplus/files/conf/http/orcid_staging.conf
@@ -39,6 +39,7 @@ server {
         proxy_pass http://orcid-staging;
         proxy_set_header X-Forwarded-Host $host;
         proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-Proto https;
         proxy_cache pdc-orcid-stagingcache;
         # handle errors using errors.conf
         proxy_intercept_errors on;

diff --git a/roles/nginxplus/files/conf/http/tigerdata_prod.conf b/roles/nginxplus/files/conf/http/tigerdata_prod.conf
@@ -49,6 +49,7 @@ server {
         proxy_pass http://tigerdata-prod/;
         proxy_set_header X-Forwarded-Host $host;
         proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-Proto https;
         proxy_cache tigerdata-prodcache;
         # handle errors using errors.conf
         proxy_intercept_errors on;
@@ -84,6 +85,7 @@ server {
         proxy_pass http://tigerdata-prod/;
         proxy_set_header X-Forwarded-Host $host;
         proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-Proto https;
         proxy_cache tigerdata-prodcache;
         # handle errors using errors.conf
         proxy_intercept_errors on;

diff --git a/roles/nginxplus/files/conf/http/tigerdata_qa.conf b/roles/nginxplus/files/conf/http/tigerdata_qa.conf
@@ -43,6 +43,7 @@ server {
         proxy_pass http://tigerdata-qa;
         proxy_set_header X-Forwarded-Host $host;
         proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-Proto https;
         proxy_cache tigerdata-qacache;
         # handle errors using errors.conf
         proxy_intercept_errors on;