From 76674ec9419d1afbcc925b5c94b2b06de6405b74 Mon Sep 17 00:00:00 2001 From: Arad Alvand Date: Wed, 14 Jun 2023 07:50:55 +0330 Subject: [PATCH] Add link to `X-Forwarded-*` docs in ssl.md --- docs/configuration/ssl.md | 6 ++++++ docs/networking/proxies/nginx.md | 6 +----- 2 files changed, 7 insertions(+), 5 deletions(-) diff --git a/docs/configuration/ssl.md b/docs/configuration/ssl.md index 653b24fc2..42664a749 100644 --- a/docs/configuration/ssl.md +++ b/docs/configuration/ssl.md @@ -135,3 +135,9 @@ Certain versions of nginx have bugs that prevent [HTTP/2](https://nginx.org/en/d ### SSL Port Exposure When your app is served from port `80` then the `/home/dokku/APP/nginx.conf` file will automatically be updated to instruct nginx to respond to ssl on port 443 as a new cert is added. If your app uses a non-standard port (perhaps you have a dockerfile deploy exposing port `99999`) you may need to manually expose an ssl port via `dokku proxy:ports-add https:443:99999`. + +## Other + +### Running behind a proxy (`X-Forwarded-Ssl`, etc.) + +See the [running behind another proxy documentation](/docs/networking/proxies/nginx.md#running-behind-another-proxy--configuring-x-forwarded--headers) for more information on how to configure your Nginx config when your server is running behind a proxy (e.g. load balancer, etc.). diff --git a/docs/networking/proxies/nginx.md b/docs/networking/proxies/nginx.md index a4f349e16..1470736e6 100644 --- a/docs/networking/proxies/nginx.md +++ b/docs/networking/proxies/nginx.md @@ -107,7 +107,7 @@ Once the HSTS setting is disabled globally, it can be re-enabled on a per-app ba dokku nginx:set node-js-app hsts true ``` -## Running behind another proxy — configuring `X-Forwarded-*` headers: +### Running behind another proxy — configuring `X-Forwarded-*` headers: Dokku's default Nginx configuration passes the de-facto standard HTTP headers [`X-Forwarded-For`](https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-Forwarded-For), [`X-Forwarded-Proto`](https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-Forwarded-Proto), and `X-Forwarded-Port` to your application. These headers indicate the IP address of the original client making the request, the protocol of the original request (HTTP or HTTPS), and the port number of the original request, respectively. @@ -493,10 +493,6 @@ See the [customizing hostnames documentation](/docs/configuration/domains.md#cus See the [disabling vhosts documentation](/docs/configuration/domains.md#disabling-vhosts) for more information on how to disable domain usage for your app. -### Running behind a load balancer - -See the [load balancer documentation](/docs/configuration/ssl.md#running-behind-a-load-balancer) for more information on how to configure your nginx config for running behind a network load balancer. - ### SSL Configuration See the [ssl documentation](/docs/configuration/ssl.md) for more information on how to configure SSL certificates for your application.