Forum

RequireTLS & reverse-proxy

Gour
6 June 2016, 11:10
Another problem I'm facing when running Hiawatha behind Webfaction's reverse-proxy is that when I try to replace current [docs.webfaction.com] rewriting rules with the setup at the Hiawatha's side by using:

VirtualHost {
....
RequireTLS = yes
}


I have a problem that when I try with:
http://subdomain.domain.tld
I get 503 error saying that my site is not configured, but when I try with
https://subdomain.domain.tld
browser complains about improper (recursive) 301 redirects, so I wonder if Hiawatha is supposed to be able being configured with
RequireTLS = yes
when used behind reverse-proxy or there is some additional setup required on my side?


Sincerely,
Gour
Hugo Leisink
6 June 2016, 21:33
Move the 'RequireTLS = yes' to the reverse proxy and use https:// in the ReverseProxy statement. That way all connections are secured.
Gour
6 June 2016, 23:01
Move the 'RequireTLS = yes' to the reverse proxy and use https:// in the ReverseProxy statement. That way all connections are secured.


Well, the problem is that I'm just (paying) user at Webfaction without access to the system-wide Nginx configuration. :-)

So, it looks I'd have to continue using specific 'app' (aka .htaccess rules) for doing http --> https redirection. :-(
This topic has been closed.