-
Notifications
You must be signed in to change notification settings - Fork 752
Add more information on Forward-XXX headers and subpath config for on-premise installations #9958
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Add more information on Forward-XXX headers and subpath config for on-premise installations #9958
Conversation
|
@WimJongeneel |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Some small changes requested
| location /my/sub/path/ { | ||
| # Make the Mendix runtime aware of https, see documentation below for more information. | ||
| proxy_set_header X-Forwarded-Proto "https"; | ||
| # Required for Mendix DevTools to work. | ||
| proxy_http_version 1.1; | ||
| # Proxy the request to the Mendix runtime. | ||
| proxy_pass http://mendix-runtim:8080/; |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Typo in runtim
|
|
||
| ## Secure cookies for on-premise applications | ||
|
|
||
| The Mendix runtime sets cookies with the `secure` attribute when the application is served over `https` However, in a scenario where the Mendix runtime is served from behind a loadbalancer using `http` for the internal communication, the Mendix runtime needs to be made aware that it is served over `https` to the end-users. This can be done by setting the [ApplicationRootUrl](/refguide/custom-settings/#applicationrooturl-section) Runtime setting to a `https://` link, or by setting the `X-Forwarded-Proto` or `X-Forwarded-Schema` header to `https` in the loadbalancer. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Missing period after https.
| # Location block for the subpath `/my/sub/path`. | ||
| location /my/sub/path/ { | ||
| # Make the Mendix runtime aware of https, see documentation below for more information. | ||
| proxy_set_header X-Forwarded-Proto "https"; |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Should the others also be added here for completeness?
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto "https";
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I've added the other headers we use (not exactly those however)
|
@OlufunkeMoronfolu Can be taken over by technical writers. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Made presentation changes. Otherwise, good to go.
Merging now!
Needs R&D verification.
Not connected to a specific release