Implement suggestion from #5216 hopefully rectifying https -> forced https hosts

jc21 · jc21 · commit 534afe606708 · 2026-01-28T14:04:32.000+10:00
diff --git a/docker/rootfs/etc/nginx/conf.d/include/force-ssl.conf b/docker/rootfs/etc/nginx/conf.d/include/force-ssl.conf
@@ -5,6 +5,9 @@ if ($scheme = "http") {
 if ($request_uri = /.well-known/acme-challenge/test-challenge) {
 	set $test "${test}T";
 }
+if ($http_x_forwarded_proto = "https") {
+	set $test "${test}S";
+}
 if ($test = H) {
 	return 301 https://$host$request_uri;
 }

Original file line number	Diff line number	Diff line change
`@@ -5,6 +5,9 @@ if ($scheme = "http") {`
`5`	`5`	`if ($request_uri = /.well-known/acme-challenge/test-challenge) {`
`6`	`6`	`set $test "${test}T";`
`7`	`7`	`}`
	`8`	`+if ($http_x_forwarded_proto = "https") {`
	`9`	`+ set $test "${test}S";`
	`10`	`+}`
`8`	`11`	`if ($test = H) {`
`9`	`12`	`return 301 https://$host$request_uri;`
`10`	`13`	`}`