http {
  server {
    listen 80;
    server_name lemmy.world;

    location / {
        proxy_pass http://lemmy-ui:1234;
        proxy_set_header Host $host;
    }
}

with this:

http {
  server {
    listen 80;
    server_name lemmy.world;

    location / {
        return 301 https://$host$request_uri;
    }
}

it breaks, gives 502 when visiting the site...

ideas? (I'm not that much into nginx...)

save

path: 0 30629, hotness: undefined, score: 4, children: 6

lemann 3 points 3 years ago

You could try this

this config snippet is assuming thet you've already got the TLS cert/pem file for lemmy.world elsewhere in your nginx.config

http {
  server {
    listen 80;
    listen 443 ssl;
    server_name lemmy.world;

    if ($scheme = "http") {
        return 307 https://$host$request_uri;
    }

    location / {
        proxy_pass http://lemmy-ui:1234;
        proxy_set_header Host $host;
    }
}

If you get redirected to lemmy.world:1234, then add absolute_redirect off; in the 'server' block

Last thing - 307 is a temporary redirect, you might to change it to a permanent one once you've confirmed it's working as intended

save

path: 0 30629 32122, hotness: undefined, score: 3, children: 1

ruud 2 points 3 years ago

Cool, thanks! I'll try that.

save

path: 0 30629 32122 32154, hotness: undefined, score: 2, children: 0

Tom 1 point 3 years ago

save

path: 0 30629 34036, hotness: undefined, score: 1, children: 0

slashzero 1 point 3 years ago

You might want to add the secure port (:443) in your redirect. Otherwise it might be trying to load https on port 80 still, which can’t work.

http: port 80
https: port 443

Notes:

just a guess. I haven’t looked at an nginx config in a while
make sure to try on multiple browsers as they all don’t behave the same way

save

path: 0 30629 32184, hotness: undefined, score: 1, children: 2

ruud 1 point 3 years ago

This piece I've pasted above isn't the whole nginx.conf, there's also a large block for the 443 traffic. It's just the http traffic that I need to redirect to 443.

save

path: 0 30629 32184 32243, hotness: undefined, score: 1, children: 1

slashzero 1 point 3 years ago

Ok. Now that I think about it, you shouldn’t have to specify the port.

save

path: 0 30629 32184 32243 32428, hotness: undefined, score: 1, children: 0

CannaVet 3 points 3 years ago

I've been on the secure version by default so far myself.

save

path: 0 31456, hotness: undefined, score: 3, children: 2

ruud 2 points 3 years ago

Yes most browsers automatically do, but some don't..