From 2c7e9986e2337959a25d449f9d18b60992dd31ea Mon Sep 17 00:00:00 2001 From: Luke Granger-Brown Date: Tue, 7 Jul 2020 22:54:54 +0000 Subject: chore(apereo-cas): fix up configuration - X-Forwarded-Proto support so it knows it's behind TLS - Remove extraneous logs and just log to stdout so it's caught be systemd Change-Id: I650777bbfd24a1922f26967ffff7da06d14b6639 Reviewed-on: https://cl.tvl.fyi/c/depot/+/952 Tested-by: BuildkiteCI Reviewed-by: glittershark --- ops/nixos/www/login.tvl.fyi.nix | 1 + 1 file changed, 1 insertion(+) (limited to 'ops/nixos/www/login.tvl.fyi.nix') diff --git a/ops/nixos/www/login.tvl.fyi.nix b/ops/nixos/www/login.tvl.fyi.nix index 8513c6e660c5..05b7cee25338 100644 --- a/ops/nixos/www/login.tvl.fyi.nix +++ b/ops/nixos/www/login.tvl.fyi.nix @@ -15,6 +15,7 @@ location / { proxy_pass http://localhost:8443; proxy_set_header X-Forwarded-For $remote_addr; + proxy_set_header X-Forwarded-Proto https; proxy_set_header Host $host; } ''; -- cgit 1.4.1