<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"><head>
<title></title>
<meta http-equiv="content-type" content="text/html;charset=utf-8"/>
<meta http-equiv="Content-Style-Type" content="text/css"/>
</head>
<body>
<div align="left"><font face="Arial" size="2"><span style=" font-size:10pt">Thanks !!!</span></font></div>
<div align="left"><font face="Arial" size="2"><span style=" font-size:10pt"><br />
</span></font></div>
<div align="left"><font face="Arial" size="2"><span style=" font-size:10pt"> proxy_pass https://192.168.1.3;</span></font></div>
<div align="left"><font face="Arial" size="2"><span style=" font-size:10pt"> proxy_pass https://192.168.1.3$request_uri;</span></font></div>
<div align="left"><font face="Arial" size="2"><span style=" font-size:10pt"><br />
</span></font></div>
<div align="left"><font face="Arial" size="2"><span style=" font-size:10pt">Both did the trick, but which one is better?</span></font></div>
<div align="left"><font face="Arial" size="2"><span style=" font-size:10pt"><br />
</span></font></div>
<div align="left"><font face="Arial" size="2"><span style=" font-size:10pt">I will now try to re-enable all the "force encryption" settings.</span></font></div>
<div align="left"><font face="Arial" size="2"><span style=" font-size:10pt"><br />
</span></font></div>
<div align="left"><font face="Arial" size="2"><span style=" font-size:10pt">And closing firewall ports to see what I can avoid having open.</span></font></div>
<div align="left"><font face="Arial" size="2"><span style=" font-size:10pt"><br />
</span></font></div>
<div align="left"><font face="Arial" size="2"><span style=" font-size:10pt">I'm a bit of novice at proxies, so please be patient :-)</span></font></div>
<div align="left"><font face="Arial" size="2"><span style=" font-size:10pt">I will read the documentation sections you mentioned.</span></font></div>
<div align="left"><font face="Arial" size="2"><span style=" font-size:10pt"><br />
</span></font></div>
<div align="left"><font face="Arial" size="2"><span style=" font-size:10pt">I think I read somewhere that nginx would connect unencrypted to the backend, and do the
encryption / decryption, is this wrong then?</span></font></div>
<div align="left"><font face="Arial" size="2"><span style=" font-size:10pt">It works on some of my other domains, so is this just an exeption?</span></font></div>
<div align="left"><font face="Arial" size="2"><span style=" font-size:10pt">What I really ask is this: Should I change my other domains also, or should I kepp them as
they are as long as they work?</span></font></div>
<div align="left"><font face="Arial" size="2"><span style=" font-size:10pt"><br />
</span></font></div>
<div align="left"><font face="Arial" size="2"><span style=" font-size:10pt">It sounds like you recommend removing the "/" on all sites(?)</span></font></div>
<div align="left"><font face="Arial" size="2"><span style=" font-size:10pt"><br />
</span></font></div>
<div align="left"><font face="Arial" size="2"><span style=" font-size:10pt">A current typical setup:</span></font></div>
<div align="left"><font face="Arial" size="2"><span style=" font-size:10pt"><br />
</span></font></div>
<div align="left"><font face="Arial" size="2"><span style=" font-size:10pt">server {</span></font></div>
<div align="left"><font face="Arial" size="2"><span style=" font-size:10pt"><br />
</span></font></div>
<div align="left"><font face="Arial" size="2"><span style=" font-size:10pt"> server_name www.printlight.dk;</span></font></div>
<div align="left"><font face="Arial" size="2"><span style=" font-size:10pt"> server_name printlight.dk;</span></font></div>
<div align="left"><font face="Arial" size="2"><span style=" font-size:10pt"><br />
</span></font></div>
<div align="left"><font face="Arial" size="2"><span style=" font-size:10pt"> location / {</span></font></div>
<div align="left"><font face="Arial" size="2"><span style=" font-size:10pt"><br />
</span></font></div>
<div align="left"><font face="Arial" size="2"><span style=" font-size:10pt"> proxy_pass http://192.168.20.3/;</span></font></div>
<div align="left"><font face="Arial" size="2"><span style=" font-size:10pt"><br />
</span></font></div>
<div align="left"><font face="Arial" size="2"><span style=" font-size:10pt"> proxy_set_header Host $host;</span></font></div>
<div align="left"><font face="Arial" size="2"><span style=" font-size:10pt"><br />
</span></font></div>
<div align="left"><font face="Arial" size="2"><span style=" font-size:10pt"> }</span></font></div>
<div align="left"><font face="Arial" size="2"><span style=" font-size:10pt"><br />
</span></font></div>
<div align="left"><font face="Arial" size="2"><span style=" font-size:10pt"> listen 443 ssl; # managed by Certbot</span></font></div>
<div align="left"><font face="Arial" size="2"><span style=" font-size:10pt"> ssl_certificate /etc/letsencrypt/live/printlight.dk/fullchain.pem; # managed by Certbot</span></font></div>
<div align="left"><font face="Arial" size="2"><span style=" font-size:10pt"> ssl_certificate_key /etc/letsencrypt/live/printlight.dk/privkey.pem; # managed by Certbot</span></font></div>
<div align="left"><font face="Arial" size="2"><span style=" font-size:10pt"> include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot</span></font></div>
<div align="left"><font face="Arial" size="2"><span style=" font-size:10pt"> ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot</span></font></div>
<div align="left"><font face="Arial" size="2"><span style=" font-size:10pt"><br />
</span></font></div>
<div align="left"><font face="Arial" size="2"><span style=" font-size:10pt"><br />
</span></font></div>
<div align="left"><font face="Arial" size="2"><span style=" font-size:10pt">}</span></font></div>
<div align="left"><font face="Arial" size="2"><span style=" font-size:10pt"><br />
</span></font></div>
<div align="left"><font face="Arial" size="2"><span style=" font-size:10pt">server {</span></font></div>
<div align="left"><font face="Arial" size="2"><span style=" font-size:10pt"> if ($host = www.printlight.dk) {</span></font></div>
<div align="left"><font face="Arial" size="2"><span style=" font-size:10pt"> return 301 https://$host$request_uri;</span></font></div>
<div align="left"><font face="Arial" size="2"><span style=" font-size:10pt"> } # managed by Certbot</span></font></div>
<div align="left"><font face="Arial" size="2"><span style=" font-size:10pt"><br />
</span></font></div>
<div align="left"><font face="Arial" size="2"><span style=" font-size:10pt"><br />
</span></font></div>
<div align="left"><font face="Arial" size="2"><span style=" font-size:10pt"> if ($host = printlight.dk) {</span></font></div>
<div align="left"><font face="Arial" size="2"><span style=" font-size:10pt"> return 301 https://$host$request_uri;</span></font></div>
<div align="left"><font face="Arial" size="2"><span style=" font-size:10pt"> } # managed by Certbot</span></font></div>
<div align="left"><font face="Arial" size="2"><span style=" font-size:10pt"><br />
</span></font></div>
<div align="left"><font face="Arial" size="2"><span style=" font-size:10pt"><br />
</span></font></div>
<div align="left"><font face="Arial" size="2"><span style=" font-size:10pt"><br />
</span></font></div>
<div align="left"><font face="Arial" size="2"><span style=" font-size:10pt"> listen 80;</span></font></div>
<div align="left"><font face="Arial" size="2"><span style=" font-size:10pt"><br />
</span></font></div>
<div align="left"><font face="Arial" size="2"><span style=" font-size:10pt"> server_name www.printlight.dk;</span></font></div>
<div align="left"><font face="Arial" size="2"><span style=" font-size:10pt"> server_name printlight.dk;</span></font></div>
<div align="left"><font face="Arial" size="2"><span style=" font-size:10pt"> return 404; # managed by Certbot</span></font></div>
<div align="left"><font face="Arial" size="2"><span style=" font-size:10pt"><br />
</span></font></div>
<div align="left"><font face="Arial" size="2"><span style=" font-size:10pt"><br />
</span></font></div>
<div align="left"><font face="Arial" size="2"><span style=" font-size:10pt"><br />
</span></font></div>
<div align="left"><font face="Arial" size="2"><span style=" font-size:10pt"><br />
</span></font></div>
<div align="left"><font face="Arial" size="2"><span style=" font-size:10pt">}</span></font></div>
<div align="left"><font face="Arial" size="2"><span style=" font-size:10pt"><br />
</span></font></div>
<div align="left"><font face="Arial" size="2"><span style=" font-size:10pt"><br />
</span></font></div>
<div align="left"><font face="Arial" size="2"><span style=" font-size:10pt"><br />
</span></font></div>
<div align="left"><font face="Arial" size="2"><span style=" font-size:10pt">Best regards</span></font></div>
<div align="left"><font face="Arial" size="2"><span style=" font-size:10pt">Danjel</span></font></div>
<div align="left"><font face="Arial" size="2"><span style=" font-size:10pt"><br />
</span></font></div>
<div align="left"><font face="Arial" size="2"><span style=" font-size:10pt"><br />
</span></font></div>
<div align="left"><font face="Arial" size="2"><span style=" font-size:10pt">From: Lucas Rolff <lucas@lucasrolff.com></span></font></div>
<div align="left"><font face="Arial" size="2"><span style=" font-size:10pt">To: "nginx@nginx.org" <nginx@nginx.org></span></font></div>
<div align="left"><font face="Arial" size="2"><span style=" font-size:10pt">Subject: Re: reverse proxy https not working</span></font></div>
<div align="left"><font face="Arial" size="2"><span style=" font-size:10pt">Date sent: Sun, 26 Aug 2018 08:47:03 +0000</span></font></div>
<div align="left"><font face="Arial" size="2"><span style=" font-size:10pt">Send reply to: nginx@nginx.org</span></font></div>
<div align="left"><font face="Arial" size="2"><span style=" font-size:10pt"><br />
</span></font></div>
<div align="left"><font face="Arial" color="#7f0000" size="2"><span style=" font-size:10pt">> > The vendor recommended me to use a reverse proxy....</span></font></div>
<div align="left"><font face="Arial" color="#7f0000" size="2"><span style=" font-size:10pt">> </span></font></div>
<div align="left"><font face="Arial" color="#7f0000" size="2"><span style=" font-size:10pt">> Ideally the vendor should have a working config in that case, but, I do see a few things that can </span></font></div>
<div align="left"><font face="Arial" color="#7f0000" size="2"><span style=" font-size:10pt">> be an issue.</span></font></div>
<div align="left"><font face="Arial" color="#7f0000" size="2"><span style=" font-size:10pt">> </span></font></div>
<div align="left"><font face="Arial" color="#7f0000" size="2"><span style=" font-size:10pt">> You’re serving https but proxying to an http backend – depending on how the software works, a </span></font></div>
<div align="left"><font face="Arial" color="#7f0000" size="2"><span style=" font-size:10pt">> lot of the reverse URLs that is sent back, might be linking to http:// instead of https://</span></font></div>
<div align="left"><font face="Arial" color="#7f0000" size="2"><span style=" font-size:10pt">> </span></font></div>
<div align="left"><font face="Arial" color="#7f0000" size="2"><span style=" font-size:10pt">> This in itself can break a lot of functionality, you might want to try to proxy to an https backend </span></font></div>
<div align="left"><font face="Arial" color="#7f0000" size="2"><span style=" font-size:10pt">> – this might require that you create a self-signed certificate on the backend (can be valid for 10 </span></font></div>
<div align="left"><font face="Arial" color="#7f0000" size="2"><span style=" font-size:10pt">> years) – the backend software itself, if it has a way to enable “https”, you’d have to set this as </span></font></div>
<div align="left"><font face="Arial" color="#7f0000" size="2"><span style=" font-size:10pt">> well.</span></font></div>
<div align="left"><font face="Arial" color="#7f0000" size="2"><span style=" font-size:10pt">> </span></font></div>
<div align="left"><font face="Arial" color="#7f0000" size="2"><span style=" font-size:10pt">> I also recommend removing the / (slash) in the end of the proxy_pass, this will pass through the </span></font></div>
<div align="left"><font face="Arial" color="#7f0000" size="2"><span style=" font-size:10pt">> request URI from the client, as per documentation:</span></font></div>
<div align="left"><font face="Arial" color="#7f0000" size="2"><span style=" font-size:10pt">> </span></font></div>
<div align="left"><font face="Arial" color="#7f0000" size="2"><span style=" font-size:10pt">> > If proxy_pass is specified without a URI, the request URI is passed to the server in the same </span></font></div>
<div align="left"><font face="Arial" color="#7f0000" size="2"><span style=" font-size:10pt">> form as sent by a client when the original request is processed, or the full normalized request </span></font></div>
<div align="left"><font face="Arial" color="#7f0000" size="2"><span style=" font-size:10pt">> URI is passed when processing the changed URI</span></font></div>
<div align="left"><font face="Arial" color="#7f0000" size="2"><span style=" font-size:10pt">> </span></font></div>
<div align="left"><font face="Arial" color="#7f0000" size="2"><span style=" font-size:10pt">> Alternatively do proxy_pass http://192.168.1.3$request_uri; or proxy_pass </span></font></div>
<div align="left"><font face="Arial" color="#7f0000" size="2"><span style=" font-size:10pt">> https://192.168.1.3$request_uri;</span></font></div>
<div align="left"><font face="Arial" color="#7f0000" size="2"><span style=" font-size:10pt">> </span></font></div>
<div align="left"><font face="Arial" color="#7f0000" size="2"><span style=" font-size:10pt">> Additionally, if your software uses Location or Refresh headers, then you might want to look </span></font></div>
<div align="left"><font face="Arial" color="#7f0000" size="2"><span style=" font-size:10pt">> into proxy_redirect ( </span></font></div>
<div align="left"><font face="Arial" color="#7f0000" size="2"><span style=" font-size:10pt">> http://nginx.org/en/docs/http/ngx_http_proxy_module.html#proxy_redirect ) to rewrite this on </span></font></div>
<div align="left"><font face="Arial" color="#7f0000" size="2"><span style=" font-size:10pt">> the “return” to the user.</span></font></div>
<div align="left"><font face="Arial" color="#7f0000" size="2"><span style=" font-size:10pt">> </span></font></div>
<div align="left"><font face="Arial" color="#7f0000" size="2"><span style=" font-size:10pt">> Best Regards,</span></font></div>
<div align="left"><font face="Arial" color="#7f0000" size="2"><span style=" font-size:10pt">> Lucas Rolff</span></font></div>
<div align="left"><font face="Arial" color="#7f0000" size="2"><span style=" font-size:10pt">> </span></font></div>
<div align="left"><font face="Arial" color="#7f0000" size="2"><span style=" font-size:10pt">> From: nginx <nginx-bounces@nginx.org> on behalf of "Jungersen, Danjel - </span></font></div>
<div align="left"><font face="Arial" color="#7f0000" size="2"><span style=" font-size:10pt">> Jungersen Grafisk ApS"<danjel@jungersen.dk></span></font></div>
<div align="left"><font face="Arial" color="#7f0000" size="2"><span style=" font-size:10pt">> Organization: Jungersen Grafisk ApS</span></font></div>
<div align="left"><font face="Arial" color="#7f0000" size="2"><span style=" font-size:10pt">> Reply-To: "nginx@nginx.org" <nginx@nginx.org></span></font></div>
<div align="left"><font face="Arial" color="#7f0000" size="2"><span style=" font-size:10pt">> Date: Sunday, 26 August 2018 at 10.33</span></font></div>
<div align="left"><font face="Arial" color="#7f0000" size="2"><span style=" font-size:10pt">> To: "nginx@nginx.org" <nginx@nginx.org></span></font></div>
<div align="left"><font face="Arial" color="#7f0000" size="2"><span style=" font-size:10pt">> Subject: Re: reverse proxy https not working</span></font></div>
<div align="left"><font face="Arial" color="#7f0000" size="2"><span style=" font-size:10pt">> </span></font></div>
<div align="left"><font face="Arial" color="#7f0000" size="2"><span style=" font-size:10pt">> </span></font></div>
<div align="left"><font face="Arial" color="#7f0000" size="2"><span style=" font-size:10pt">> </span></font></div>
<div align="left"><font face="Arial" color="#7f0000" size="2"><span style=" font-size:10pt">> From: Lucas Rolff <lucas@lucasrolff.com></span></font></div>
<div align="left"><font face="Arial" color="#7f0000" size="2"><span style=" font-size:10pt">> To: "nginx@nginx.org"<nginx@nginx.org></span></font></div>
<div align="left"><font face="Arial" color="#7f0000" size="2"><span style=" font-size:10pt">> Subject: Re: reverse proxy https not working</span></font></div>
<div align="left"><font face="Arial" color="#7f0000" size="2"><span style=" font-size:10pt">> Date sent: Sun, 26 Aug 2018 08:19:28 +0000</span></font></div>
<div align="left"><font face="Arial" color="#7f0000" size="2"><span style=" font-size:10pt">> Send reply to: nginx@nginx.org</span></font></div>
<div align="left"><font face="Arial" color="#7f0000" size="2"><span style=" font-size:10pt">> </span></font></div>
<div align="left"><font face="Arial" color="#7f0000" size="2"><span style=" font-size:10pt">> > Which functions do not work?</span></font></div>
<div align="left"><font face="Arial" color="#7f0000" size="2"><span style=" font-size:10pt">> Thats a bit hard to say, but I'll try..</span></font></div>
<div align="left"><font face="Arial" color="#7f0000" size="2"><span style=" font-size:10pt">> </span></font></div>
<div align="left"><font face="Arial" color="#7f0000" size="2"><span style=" font-size:10pt">> It's a print production system.</span></font></div>
<div align="left"><font face="Arial" color="#7f0000" size="2"><span style=" font-size:10pt">> 1 part is approval of pages in a job.</span></font></div>
<div align="left"><font face="Arial" color="#7f0000" size="2"><span style=" font-size:10pt">> </span></font></div>
<div align="left"><font face="Arial" color="#7f0000" size="2"><span style=" font-size:10pt">> When I try to open a page for approval the system should open up the page in large size.</span></font></div>
<div align="left"><font face="Arial" color="#7f0000" size="2"><span style=" font-size:10pt">> That does not happen.</span></font></div>
<div align="left"><font face="Arial" color="#7f0000" size="2"><span style=" font-size:10pt">> The thumbnails on the side works.</span></font></div>
<div align="left"><font face="Arial" color="#7f0000" size="2"><span style=" font-size:10pt">> And as stated, when I do the same thing when connected via http, there are no issues.</span></font></div>
<div align="left"><font face="Arial" color="#7f0000" size="2"><span style=" font-size:10pt">> </span></font></div>
<div align="left"><font face="Arial" color="#7f0000" size="2"><span style=" font-size:10pt">> > </span></font></div>
<div align="left"><font face="Arial" color="#7f0000" size="2"><span style=" font-size:10pt">> > Be aware some software (WordPress being a good example) doesn’t always work with </span></font></div>
<div align="left"><font face="Arial" color="#7f0000" size="2"><span style=" font-size:10pt">> reverse</span></font></div>
<div align="left"><font face="Arial" color="#7f0000" size="2"><span style=" font-size:10pt">> > proxies that easy.</span></font></div>
<div align="left"><font face="Arial" color="#7f0000" size="2"><span style=" font-size:10pt">> The vendor recommended me to use a reverse proxy....</span></font></div>
<div align="left"><font face="Arial" color="#7f0000" size="2"><span style=" font-size:10pt">> </span></font></div>
<div align="left"><font face="Arial" color="#7f0000" size="2"><span style=" font-size:10pt">> > </span></font></div>
<div align="left"><font face="Arial" color="#7f0000" size="2"><span style=" font-size:10pt">> > Could you possibly include your nginx configuration? Especially your proxy parts.</span></font></div>
<div align="left"><font face="Arial" color="#7f0000" size="2"><span style=" font-size:10pt">> </span></font></div>
<div align="left"><font face="Arial" color="#7f0000" size="2"><span style=" font-size:10pt">> server {</span></font></div>
<div align="left"><font face="Arial" color="#7f0000" size="2"><span style=" font-size:10pt">> </span></font></div>
<div align="left"><font face="Arial" color="#7f0000" size="2"><span style=" font-size:10pt">> server_name portal.printlight.dk;</span></font></div>
<div align="left"><font face="Arial" color="#7f0000" size="2"><span style=" font-size:10pt">> </span></font></div>
<div align="left"><font face="Arial" color="#7f0000" size="2"><span style=" font-size:10pt">> client_max_body_size 1000m; # (I tried with and without this line)</span></font></div>
<div align="left"><font face="Arial" color="#7f0000" size="2"><span style=" font-size:10pt">> </span></font></div>
<div align="left"><font face="Arial" color="#7f0000" size="2"><span style=" font-size:10pt">> error_log /etc/nginx/log warn;</span></font></div>
<div align="left"><font face="Arial" color="#7f0000" size="2"><span style=" font-size:10pt">> </span></font></div>
<div align="left"><font face="Arial" color="#7f0000" size="2"><span style=" font-size:10pt">> location / {</span></font></div>
<div align="left"><font face="Arial" color="#7f0000" size="2"><span style=" font-size:10pt">> </span></font></div>
<div align="left"><font face="Arial" color="#7f0000" size="2"><span style=" font-size:10pt">> proxy_pass http://192.168.1.3:80/;</span></font></div>
<div align="left"><font face="Arial" color="#7f0000" size="2"><span style=" font-size:10pt">> </span></font></div>
<div align="left"><font face="Arial" color="#7f0000" size="2"><span style=" font-size:10pt">> proxy_set_header Host $host;</span></font></div>
<div align="left"><font face="Arial" color="#7f0000" size="2"><span style=" font-size:10pt">> </span></font></div>
<div align="left"><font face="Arial" color="#7f0000" size="2"><span style=" font-size:10pt">> }</span></font></div>
<div align="left"><font face="Arial" color="#7f0000" size="2"><span style=" font-size:10pt">> </span></font></div>
<div align="left"><font face="Arial" color="#7f0000" size="2"><span style=" font-size:10pt">> listen 80;</span></font></div>
<div align="left"><font face="Arial" color="#7f0000" size="2"><span style=" font-size:10pt">> listen 443 ssl; # managed by Certbot</span></font></div>
<div align="left"><font face="Arial" color="#7f0000" size="2"><span style=" font-size:10pt">> ssl_certificate /etc/letsencrypt/live/portal.printlight.dk/fullchain.pem; # managed by Certbot</span></font></div>
<div align="left"><font face="Arial" color="#7f0000" size="2"><span style=" font-size:10pt">> ssl_certificate_key /etc/letsencrypt/live/portal.printlight.dk/privkey.pem; # managed by </span></font></div>
<div align="left"><font face="Arial" color="#7f0000" size="2"><span style=" font-size:10pt">> Certbot</span></font></div>
<div align="left"><font face="Arial" color="#7f0000" size="2"><span style=" font-size:10pt">> include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot</span></font></div>
<div align="left"><font face="Arial" color="#7f0000" size="2"><span style=" font-size:10pt">> ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot</span></font></div>
<div align="left"><font face="Arial" color="#7f0000" size="2"><span style=" font-size:10pt">> </span></font></div>
<div align="left"><font face="Arial" color="#7f0000" size="2"><span style=" font-size:10pt">> }</span></font></div>
<div align="left"><font face="Arial" color="#7f0000" size="2"><span style=" font-size:10pt">> </span></font></div>
<div align="left"><font face="Arial" color="#7f0000" size="2"><span style=" font-size:10pt">> </span></font></div>
<div align="left"><font face="Arial" color="#7f0000" size="2"><span style=" font-size:10pt">> > </span></font></div>
<div align="left"><font face="Arial" color="#7f0000" size="2"><span style=" font-size:10pt">> > From: nginx <nginx-bounces@nginx.org> on behalf of "Jungersen, Danjel -</span></font></div>
<div align="left"><font face="Arial" color="#7f0000" size="2"><span style=" font-size:10pt">> > Jungersen Grafisk ApS"<danjel@jungersen.dk></span></font></div>
<div align="left"><font face="Arial" color="#7f0000" size="2"><span style=" font-size:10pt">> > Organization: Jungersen Grafisk ApS</span></font></div>
<div align="left"><font face="Arial" color="#7f0000" size="2"><span style=" font-size:10pt">> > Reply-To: "nginx@nginx.org"<nginx@nginx.org></span></font></div>
<div align="left"><font face="Arial" color="#7f0000" size="2"><span style=" font-size:10pt">> > Date: Sunday, 26 August 2018 at 10.13</span></font></div>
<div align="left"><font face="Arial" color="#7f0000" size="2"><span style=" font-size:10pt">> > To: "nginx@nginx.org"<nginx@nginx.org></span></font></div>
<div align="left"><font face="Arial" color="#7f0000" size="2"><span style=" font-size:10pt">> > Subject: reverse proxy https not working</span></font></div>
<div align="left"><font face="Arial" color="#7f0000" size="2"><span style=" font-size:10pt">> > </span></font></div>
<div align="left"><font face="Arial" color="#7f0000" size="2"><span style=" font-size:10pt">> > Hi there.</span></font></div>
<div align="left"><font face="Arial" color="#7f0000" size="2"><span style=" font-size:10pt">> > </span></font></div>
<div align="left"><font face="Arial" color="#7f0000" size="2"><span style=" font-size:10pt">> > I have a setup that almost works.</span></font></div>
<div align="left"><font face="Arial" color="#7f0000" size="2"><span style=" font-size:10pt">> > :-)</span></font></div>
<div align="left"><font face="Arial" color="#7f0000" size="2"><span style=" font-size:10pt">> > </span></font></div>
<div align="left"><font face="Arial" color="#7f0000" size="2"><span style=" font-size:10pt">> > I have a handful of domains that works as they should.</span></font></div>
<div align="left"><font face="Arial" color="#7f0000" size="2"><span style=" font-size:10pt">> > Traffic as accepted and forwarded to my apache on another server (also in dmz).</span></font></div>
<div align="left"><font face="Arial" color="#7f0000" size="2"><span style=" font-size:10pt">> > I have setup certificates with certbot.</span></font></div>
<div align="left"><font face="Arial" color="#7f0000" size="2"><span style=" font-size:10pt">> > I have green (encrypted) icon on my browser when I visit my sites.</span></font></div>
<div align="left"><font face="Arial" color="#7f0000" size="2"><span style=" font-size:10pt">> > </span></font></div>
<div align="left"><font face="Arial" color="#7f0000" size="2"><span style=" font-size:10pt">> > 1 site is running on my green network.</span></font></div>
<div align="left"><font face="Arial" color="#7f0000" size="2"><span style=" font-size:10pt">> > When I connect to that site all seems to work.</span></font></div>
<div align="left"><font face="Arial" color="#7f0000" size="2"><span style=" font-size:10pt">> > However, certain functions fail, but only when connected via https.</span></font></div>
<div align="left"><font face="Arial" color="#7f0000" size="2"><span style=" font-size:10pt">> > If I change the setup so that port 80 is not redirected to 443, everything works as long </span></font></div>
<div align="left"><font face="Arial" color="#7f0000" size="2"><span style=" font-size:10pt">> as I</span></font></div>
<div align="left"><font face="Arial" color="#7f0000" size="2"><span style=" font-size:10pt">> > stay with http.</span></font></div>
<div align="left"><font face="Arial" color="#7f0000" size="2"><span style=" font-size:10pt">> > As soon as I chenge the url to https:// some functions fail.</span></font></div>
<div align="left"><font face="Arial" color="#7f0000" size="2"><span style=" font-size:10pt">> > I have tried but cannot understand the debug log.</span></font></div>
<div align="left"><font face="Arial" color="#7f0000" size="2"><span style=" font-size:10pt">> > </span></font></div>
<div align="left"><font face="Arial" color="#7f0000" size="2"><span style=" font-size:10pt">> > I don't see any hits on my firewall.</span></font></div>
<div align="left"><font face="Arial" color="#7f0000" size="2"><span style=" font-size:10pt">> > </span></font></div>
<div align="left"><font face="Arial" color="#7f0000" size="2"><span style=" font-size:10pt">> > Any clues?</span></font></div>
<div align="left"><font face="Arial" color="#7f0000" size="2"><span style=" font-size:10pt">> > I will be happy to send config and logfiles, but I'm not sure exactly what to send.</span></font></div>
<div align="left"><font face="Arial" color="#7f0000" size="2"><span style=" font-size:10pt">> > </span></font></div>
<div align="left"><font face="Arial" color="#7f0000" size="2"><span style=" font-size:10pt">> > Best regards</span></font></div>
<div align="left"><font face="Arial" color="#7f0000" size="2"><span style=" font-size:10pt">> > Danjel</span></font></div>
<div align="left"><font face="Arial" color="#7f0000" size="2"><span style=" font-size:10pt">> > </span></font></div>
<div align="left"><font face="Arial" color="#7f0000" size="2"><span style=" font-size:10pt">> </span></font></div>
<div align="left"><font face="Arial" color="#7f0000" size="2"><span style=" font-size:10pt">> </span></font></div>
<div align="left"><font face="Arial" size="2"><span style=" font-size:10pt"><br />
</span></font></div>
<div align="left"> </div>
</body>
</html>