From 134d89c93d7ef2cf8725a28b31356887e4cdde35 Mon Sep 17 00:00:00 2001 From: Dmitry Smirnov Date: Fri, 22 Feb 2019 18:24:00 +1100 Subject: [PATCH] nginx.conf: removed "proxy_set_header X-Forwarded-Proto $scheme;" When TLS is terminated on load balancer, unencrypted connection is established to Nginx which drops "X-Forwarded-Proto" header (if set by the load balancer) causing notorious error on (successful) authentication: 422 The change you requested was rejected --- debian/conf/nginx.conf.example | 1 - 1 file changed, 1 deletion(-) diff --git a/debian/conf/nginx.conf.example b/debian/conf/nginx.conf.example index b966da7f5c..610f35bad3 100644 --- a/debian/conf/nginx.conf.example +++ b/debian/conf/nginx.conf.example @@ -53,7 +53,6 @@ server { proxy_set_header Host $http_host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; - proxy_set_header X-Forwarded-Proto $scheme; proxy_pass http://gitlab-workhorse; }