ashipov/immich
1
0
Fork 1
forked from dark_thunder/immich
Code Pull Requests Activity

fix(nginx): x-forwarded-* headers (#2019)

Browse Source 
* fix(nginx): x-forwarded-* headers

* change category / add link to nginx config
This commit is contained in:
Michel Heusschen
2023-03-22 21:46:30 +01:00
committed by GitHub
parent 6da50626e1
commit 792a87e407
4 changed files with 39 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files

22
nginx/templates/default.conf.template
View File

@ -3,6 +3,14 @@ map $http_upgrade $connection_upgrade {
'' close;
}
map $http_x_forwarded_proto $forwarded_protocol {
default $scheme;
# Only allow the values 'http' and 'https' for the X-Forwarded-Proto header.
http http;
https https;
}
upstream server {
server ${IMMICH_SERVER_HOST};
keepalive 2;
@ -43,13 +51,12 @@ server {
proxy_force_ranges on;
proxy_http_version 1.1;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header Host $http_host;
proxy_set_header X-Forwarded-Host $http_host;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_set_header X-Forwarded-Proto $forwarded_protocol;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection $connection_upgrade;
proxy_set_header Host $host;
rewrite /api/(.*) /$1 break;
@ -64,13 +71,12 @@ server {
proxy_force_ranges on;
proxy_http_version 1.1;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header Host $http_host;
proxy_set_header X-Forwarded-Host $http_host;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_set_header X-Forwarded-Proto $forwarded_protocol;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection $connection_upgrade;
proxy_set_header Host $host;
proxy_pass ${IMMICH_WEB_SCHEME}web;
}