-
Notifications
You must be signed in to change notification settings - Fork 19
Open
Labels
bugSomething isn't workingSomething isn't working
Description
Describe the bug
I use nginx as reverse proxy and redirect all traffic to https.
The sign up form ("Create admin account") has however, http statically rendered in the code and all creds will be submitted unencrypted.
ln 39: <form action="[http://<IP-address>/signup?next=%2Fdashboard](view-source:http://<IP-address>/signup?next=%2Fdashboard)" method="[post]()" novalidate>
To Reproduce
Steps to reproduce the behavior:
Use a reverse proxy such as nginx and redirect all traffic on port 80, to port 443.
server {
listen 80 default_server;
server_name _;
return 301 https://$host$request_uri;
}
server {
listen 443 ssl;
server_name _;
ssl_certificate /etc/nginx/ssl/linguard.crt;
ssl_certificate_key /etc/nginx/ssl/linguard.key;
ssl_protocols TLSv1.2 TLSv1.3;
location / {
proxy_set_header Host $host;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_pass http://127.0.0.1:8080;
}
}
Expected behavior
Well, either it has to be a relative link or needs to be:
Metadata
Metadata
Assignees
Labels
bugSomething isn't workingSomething isn't working