Nginx Reverse proxy force https

Question

We have a server setup for reverse proxy using nginx. This server will redirect visitors to the corresponding server in which path they are accessed. Now, I want to set up the nginx.conf to force redirect them to https. The problem is I am getting a "too many redirection" error. I tried using a rewrite and adding "proxy_set_header X-Forwarded-Proto https;" but none of it works. Is there a way we can achieve this? We have set up a ssl cert on cloudflare so we won't need to add it on the config.

Below is the config setting of the current nginx.

   server {
    listen       80 default_server;
    listen       [::]:80 default_server;
    server_name  localhost;
    root         /usr/share/nginx/html;

   if ($http_x_forwarded_proto = "http") {
      rewrite  ^/(.*)$  https://development-link/$1 permanent;
   }

    # Load configuration files for the default server block.
    include /etc/nginx/default.d/*.conf;

    location / {
            proxy_set_header X-Real-IP  $remote_addr;
            proxy_set_header X-Forwarded-For $remote_addr;
            proxy_set_header Host $host;
            proxy_pass http://development-elb1;
            proxy_set_header X-Forwarded-Proto https;
    }

    location /en {
            proxy_set_header X-Real-IP  $remote_addr;
            proxy_set_header X-Forwarded-For $remote_addr;
            proxy_set_header Host $host;
            proxy_pass http://development-elb2;
            proxy_set_header    X-Forwarded-Proto https;
    }

Tan Hong Tat · Accepted Answer · 2017-03-31 03:39:06Z

6

Use a separate block.

# Redirect HTTP to HTTPS
server {
    listen       80 default_server;
    listen       [::]:80 default_server;
    server_name  localhost;
    return 301   https://$host$request_uri;
}

# HTTPS
server {
    listen       443 default_server;
    listen       [::]:443 default_server;
    server_name  localhost;
    root         /usr/share/nginx/html;       

    # Load configuration files for the default server block.
    include /etc/nginx/default.d/*.conf;

    location / {
        proxy_set_header X-Real-IP  $remote_addr;
        proxy_set_header X-Forwarded-For $remote_addr;
        proxy_set_header Host $host;
        proxy_pass http://development-elb1;
        proxy_set_header X-Forwarded-Proto https;
    }

    location /en {
        proxy_set_header X-Real-IP  $remote_addr;
        proxy_set_header X-Forwarded-For $remote_addr;
        proxy_set_header Host $host;
        proxy_pass http://development-elb2;
        proxy_set_header    X-Forwarded-Proto https;
    }
}

answered Mar 31, 2017 at 3:39

Tan Hong Tat

6,9092 gold badges29 silver badges26 bronze badges

Sign up to request clarification or add additional context in comments.

4 Comments

banri16 Over a year ago

Hi, thanks for the response. I tried using a separate block but I am still getting the "too many redirect error".

Tan Hong Tat Over a year ago

Do you have any HTTP/HTTPS redirection from the development servers?

banri16 Over a year ago

no, the redirection we have on the development is when the user is not logged in. I am thinking that it may be because of the proxy? Not really sure, but we have 2 servers when a user access a link without /en then it will be redirected to server 1 but if it has a /en then it will go to server 2 elb.

timelmer Over a year ago

I hit a "too many redirects" error because I forgot to separate the server block by port (e.g. one for 80, one for 443), causing it to infinitely redirect.

Satys · Accepted Answer · 2017-04-04 05:49:28Z

0

So you are using cloudflare as your DNS.

There is a very easy hack to force the users to https even if you are using free version of cloudflare at the cloudflare end. And just host http version at your Nginx.

1- Open cloudflare and choose your domain.

2- Go to Page Rules tab.

3- Create page rule

4- for the url, put http://www.example.com/*

5- for setting, choose always use https

6- Click Save and deploy

Now you have configured at your cloudflare to force user to redirect to https url.

edited Apr 4, 2017 at 5:49

answered Mar 31, 2017 at 12:25

Satys

2,4491 gold badge23 silver badges27 bronze badges

Collectives™ on Stack Overflow

Nginx Reverse proxy force https

2 Answers 2

4 Comments

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

4 Comments

Comments

Your Answer

Sign up or log in

Post as a guest

Related