vbatts/quay
Archived
1
0
Fork 0
Code Issues Pull requests Releases Wiki Activity

Trust upstream proxies to specify https scheme

Browse source
This commit is contained in:
Jake Moshenko 2016-02-03 13:08:43 -05:00
parent 958bd8e565
commit 0fdbf8a210
2 changed files with 9 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

8
conf/server-base.conf
View file

@ -5,7 +5,7 @@ server_name _;
keepalive_timeout 5;
if ($host = "www.quay.io") {
return 301 $scheme://quay.io$request_uri;
return 301 $proper_scheme://quay.io$request_uri;
}
if ($args ~ "_escaped_fragment_") {
@ -18,7 +18,7 @@ add_header X-Frame-Options DENY;
# Proxy Headers
proxy_set_header X-Forwarded-For $proper_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_set_header X-Forwarded-Proto $proper_scheme;
proxy_set_header Host $host;
proxy_redirect off;
@ -57,7 +57,7 @@ location ~ ^/v2 {
# Setting ANY header clears all inherited proxy_set_header directives
proxy_set_header X-Forwarded-For $proper_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_set_header X-Forwarded-Proto $proper_scheme;
proxy_set_header Host $host;
proxy_buffering off;
@ -77,7 +77,7 @@ location ~ ^/v2 {
location ~ ^/v1 {
# Setting ANY header clears all inherited proxy_set_header directives
proxy_set_header X-Forwarded-For $proper_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_set_header X-Forwarded-Proto $proper_scheme;
proxy_set_header Host $host;
proxy_buffering off;