From f5a53712a7ba8dd68189caab7133767f2e14892f Mon Sep 17 00:00:00 2001 From: Carolyn Cole Date: Wed, 9 Oct 2024 16:01:39 -0400 Subject: [PATCH] [NGINX] adding https stanza to other RDSS applications --- roles/nginxplus/files/conf/http/dev/tigerdata_staging.conf | 2 ++ roles/nginxplus/files/conf/http/oawaiver-prod.conf | 1 + roles/nginxplus/files/conf/http/oawaiver-staging.conf | 1 + roles/nginxplus/files/conf/http/orcid_prod.conf | 1 + roles/nginxplus/files/conf/http/orcid_staging.conf | 1 + roles/nginxplus/files/conf/http/tigerdata_prod.conf | 2 ++ roles/nginxplus/files/conf/http/tigerdata_qa.conf | 1 + 7 files changed, 9 insertions(+) diff --git a/roles/nginxplus/files/conf/http/dev/tigerdata_staging.conf b/roles/nginxplus/files/conf/http/dev/tigerdata_staging.conf index c02be0bdfe..5e90575b00 100644 --- a/roles/nginxplus/files/conf/http/dev/tigerdata_staging.conf +++ b/roles/nginxplus/files/conf/http/dev/tigerdata_staging.conf @@ -28,6 +28,7 @@ server { proxy_set_header Connection $connection_upgrade; proxy_set_header X-Forwarded-Host $host; proxy_set_header X-Real-IP $remote_addr; + proxy_set_header X-Forwarded-Proto https; } location / { @@ -53,6 +54,7 @@ server { proxy_set_header Connection $connection_upgrade; proxy_set_header X-Forwarded-Host $host; proxy_set_header X-Real-IP $remote_addr; + proxy_set_header X-Forwarded-Proto https; } location / { diff --git a/roles/nginxplus/files/conf/http/oawaiver-prod.conf b/roles/nginxplus/files/conf/http/oawaiver-prod.conf index 932b01386d..8bd121dda6 100644 --- a/roles/nginxplus/files/conf/http/oawaiver-prod.conf +++ b/roles/nginxplus/files/conf/http/oawaiver-prod.conf @@ -42,6 +42,7 @@ server { proxy_pass http://oawaiver-prod; proxy_set_header X-Forwarded-Host $host; proxy_set_header X-Real-IP $remote_addr; + proxy_set_header X-Forwarded-Proto https; proxy_cache oawaiver-prodcache; # handle errors using errors.conf proxy_intercept_errors on; diff --git a/roles/nginxplus/files/conf/http/oawaiver-staging.conf b/roles/nginxplus/files/conf/http/oawaiver-staging.conf index b787b1f713..cf53db5eca 100644 --- a/roles/nginxplus/files/conf/http/oawaiver-staging.conf +++ b/roles/nginxplus/files/conf/http/oawaiver-staging.conf @@ -35,6 +35,7 @@ server { proxy_pass http://oawaiver-staging; proxy_set_header X-Forwarded-Host $host; proxy_set_header X-Real-IP $remote_addr; + proxy_set_header X-Forwarded-Proto https; proxy_cache oawaiver-stagingcache; # handle errors using errors.conf proxy_intercept_errors on; diff --git a/roles/nginxplus/files/conf/http/orcid_prod.conf b/roles/nginxplus/files/conf/http/orcid_prod.conf index 1dea76e2d9..f24c0d1ec5 100644 --- a/roles/nginxplus/files/conf/http/orcid_prod.conf +++ b/roles/nginxplus/files/conf/http/orcid_prod.conf @@ -75,6 +75,7 @@ server { proxy_pass http://orcid-prod; proxy_set_header X-Forwarded-Host $host; proxy_set_header X-Real-IP $remote_addr; + proxy_set_header X-Forwarded-Proto https; proxy_cache pdc-orcid-prodcache; # handle errors using errors.conf proxy_intercept_errors on; diff --git a/roles/nginxplus/files/conf/http/orcid_staging.conf b/roles/nginxplus/files/conf/http/orcid_staging.conf index f3bfbf1eb8..406a43dc86 100644 --- a/roles/nginxplus/files/conf/http/orcid_staging.conf +++ b/roles/nginxplus/files/conf/http/orcid_staging.conf @@ -39,6 +39,7 @@ server { proxy_pass http://orcid-staging; proxy_set_header X-Forwarded-Host $host; proxy_set_header X-Real-IP $remote_addr; + proxy_set_header X-Forwarded-Proto https; proxy_cache pdc-orcid-stagingcache; # handle errors using errors.conf proxy_intercept_errors on; diff --git a/roles/nginxplus/files/conf/http/tigerdata_prod.conf b/roles/nginxplus/files/conf/http/tigerdata_prod.conf index 7a8cf4e701..b82c5476a7 100644 --- a/roles/nginxplus/files/conf/http/tigerdata_prod.conf +++ b/roles/nginxplus/files/conf/http/tigerdata_prod.conf @@ -49,6 +49,7 @@ server { proxy_pass http://tigerdata-prod/; proxy_set_header X-Forwarded-Host $host; proxy_set_header X-Real-IP $remote_addr; + proxy_set_header X-Forwarded-Proto https; proxy_cache tigerdata-prodcache; # handle errors using errors.conf proxy_intercept_errors on; @@ -84,6 +85,7 @@ server { proxy_pass http://tigerdata-prod/; proxy_set_header X-Forwarded-Host $host; proxy_set_header X-Real-IP $remote_addr; + proxy_set_header X-Forwarded-Proto https; proxy_cache tigerdata-prodcache; # handle errors using errors.conf proxy_intercept_errors on; diff --git a/roles/nginxplus/files/conf/http/tigerdata_qa.conf b/roles/nginxplus/files/conf/http/tigerdata_qa.conf index 66bc5efc92..ca0790f4e8 100644 --- a/roles/nginxplus/files/conf/http/tigerdata_qa.conf +++ b/roles/nginxplus/files/conf/http/tigerdata_qa.conf @@ -43,6 +43,7 @@ server { proxy_pass http://tigerdata-qa; proxy_set_header X-Forwarded-Host $host; proxy_set_header X-Real-IP $remote_addr; + proxy_set_header X-Forwarded-Proto https; proxy_cache tigerdata-qacache; # handle errors using errors.conf proxy_intercept_errors on;