fofos/fofos-admin
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

nginx redirects stay relative

Browse Source 
It sits behind the proxy that terminates TLS, so it believes it is serving plain HTTP. Asked for
/home/gallery/16 it correctly redirects to the directory and wrote the Location as
http://host/home/gallery/16/ — downgrading an HTTPS visitor to HTTP for a round trip before the proxy
sent them back where they came from.

absolute_redirect off emits just the path, and the browser keeps the scheme it already had.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
This commit is contained in:
pastilhas
2026-08-30 10:34:36 +01:00
co-authored by Claude Opus 5
parent 28798ad67b
commit 40a6a5b8d2
1 changed files with 8 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
api/static-site.ts
+8
View File
@@ -218,6 +218,14 @@ const NGINX_CONF = `server {
root /usr/share/nginx/html; root /usr/share/nginx/html;
index index.html; index index.html;
# Redirects stay relative, so they keep the scheme and host the visitor arrived on.
#
# nginx sits behind the proxy that terminates TLS, so it believes it is serving plain HTTP. Asked for
# /home/gallery/16 it correctly redirects to the directory — and wrote the Location as
# http://host/home/gallery/16/, downgrading an HTTPS visitor to HTTP for a round trip before the
# proxy sent them back. Off emits just the path, and the browser keeps the scheme it had.
absolute_redirect off;
# Text compresses; the images and video here are already compressed formats and would only burn CPU. # Text compresses; the images and video here are already compressed formats and would only burn CPU.
gzip on; gzip on;
gzip_vary on; gzip_vary on;