I'm hosting a website behind a Cloudflare proxy, which means that all requests to my server are over port 80, even though Cloudflare handles HTTP (port 80) and HTTPS (port 443) traffic.
To distinguish between the two, Cloudflare includes an X-Forwarded-Proto
header which is set to "http" or "https" based on the user's connection.
I would like to redirect every request with an X-Forwarded-Proto: http
header to the SSL version of my site. How can I achieve this with an nginx configuration?
Passing Request HeadersBy default, NGINX redefines two header fields in proxied requests, “Host” and “Connection”, and eliminates the header fields whose values are empty strings. “Host” is set to the $proxy_host variable, and “Connection” is set to close .
The simplest way to do this is with an if
directive. If there is a better way, please let me know, as people say the if
directive is inefficient. Nginx converts dashes to underscores in headers, so X-Forwarded-Proto
becomes $http_x_forwarded_proto
.
server { listen 80; server_name example.com; # Replace this with your own hostname if ($http_x_forwarded_proto = "http") { return 301 https://example.com$request_uri; } # Rest of configuration goes here... }
Try using map directive: http://nginx.org/en/docs/http/ngx_http_map_module.html#map
Something like that...
map $http_x_forwarded_proto $php_backend { "https" "https_php_backend named loc"; default "default_php_backend named loc"; } server{ location / { proxy_pass http://$php_backend; } }
This code is abstract, but you can try tht way...
If you love us? You can donate to us via Paypal or buy me a coffee so we can maintain and grow! Thank you!
Donate Us With