Set SECURE_PROXY_SSL_HEADER and X-Forwarded-Proto header #384

Signed-off-by: Thomas Druez <tdruez@nexb.com>

Author: tdruez

etc/nginx/conf.d/default.conf

@@ -8,6 +8,7 @@ server {
     location / {
         proxy_pass http://gunicorn_app;
         proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto https;
         proxy_set_header Host $host;
         proxy_redirect off;
         client_max_body_size 10G;

etc/nginx/examples/ssl.conf

@@ -15,6 +15,7 @@ server {
     location / {
         proxy_pass http://gunicorn_app;
         proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto https;
         proxy_set_header Host $host;
         proxy_redirect off;
         client_max_body_size 10G;

scancodeio/settings.py

@@ -108,6 +108,8 @@
 
 WSGI_APPLICATION = "scancodeio.wsgi.application"
 
+SECURE_PROXY_SSL_HEADER = ('HTTP_X_FORWARDED_PROTO', 'https')
+
 # Database
 
 DATABASES = {