From 2c7e9986e2337959a25d449f9d18b60992dd31ea Mon Sep 17 00:00:00 2001
From: Luke Granger-Brown <hg@lukegb.com>
Date: Tue, 7 Jul 2020 22:54:54 +0000
Subject: chore(apereo-cas): fix up configuration

- X-Forwarded-Proto support so it knows it's behind TLS
- Remove extraneous logs and just log to stdout so it's caught be systemd

Change-Id: I650777bbfd24a1922f26967ffff7da06d14b6639
Reviewed-on: https://cl.tvl.fyi/c/depot/+/952
Tested-by: BuildkiteCI
Reviewed-by: glittershark <grfn@gws.fyi>
---
 ops/nixos/www/login.tvl.fyi.nix | 1 +
 1 file changed, 1 insertion(+)

(limited to 'ops/nixos')

diff --git a/ops/nixos/www/login.tvl.fyi.nix b/ops/nixos/www/login.tvl.fyi.nix
index 8513c6e660c5..05b7cee25338 100644
--- a/ops/nixos/www/login.tvl.fyi.nix
+++ b/ops/nixos/www/login.tvl.fyi.nix
@@ -15,6 +15,7 @@
         location / {
           proxy_pass http://localhost:8443;
           proxy_set_header X-Forwarded-For $remote_addr;
+          proxy_set_header X-Forwarded-Proto https;
           proxy_set_header Host $host;
         }
       '';
-- 
cgit 1.4.1