Docs: Use HTTPS for NGINX links.

NEW_CONTRIBUTOR.md

@@ -111,9 +111,9 @@ font-family: Tahoma, Verdana, Arial, sans-serif; }
 working. Further configuration is required.</p>
 
 <p>For online documentation and support please refer to
-<a href="http://nginx.org/">nginx.org</a>.<br/>
+<a href="https://nginx.org/">nginx.org</a>.<br/>
 Commercial support is available at
-<a href="http://nginx.com/">nginx.com</a>.</p>
+<a href="https://nginx.com/">nginx.com</a>.</p>
 
 <p><em>Thank you for using nginx.</em></p>
 </body>
@@ -404,9 +404,9 @@ font-family: Tahoma, Verdana, Arial, sans-serif; }
 working. Further configuration is required.</p>
 
 <p>For online documentation and support please refer to
-<a href="http://nginx.org/">nginx.org</a>.<br/>
+<a href="https://nginx.org/">nginx.org</a>.<br/>
 Commercial support is available at
-<a href="http://nginx.com/">nginx.com</a>.</p>
+<a href="https://nginx.com/">nginx.com</a>.</p>
 
 <p><em>Thank you for using nginx.</em></p>
 </body>

docs/user-guide/nginx-configuration/configmap.md

@@ -755,7 +755,7 @@ Enables or disables [HTTP/2](https://nginx.org/en/docs/http/ngx_http_v2_module.h
 
 ## gzip-disable
 
-Disables [gzipping](http://nginx.org/en/docs/http/ngx_http_gzip_module.html#gzip_disable) of responses for requests with "User-Agent" header fields matching any of the specified regular expressions.
+Disables [gzipping](https://nginx.org/en/docs/http/ngx_http_gzip_module.html#gzip_disable) of responses for requests with "User-Agent" header fields matching any of the specified regular expressions.
 
 ## gzip-level
 
@@ -809,14 +809,14 @@ _References:_
 Sets the bucket size for the variables hash table.
 
 _References:_
-[https://nginx.org/en/docs/http/ngx_http_map_module.html#variables_hash_bucket_size](https://nginx.org/en/docs/http/ngx_http_map_module.html#variables_hash_bucket_size)
+[https://nginx.org/en/docs/http/ngx_http_map_module.html#map_hash_bucket_size](https://nginx.org/en/docs/http/ngx_http_map_module.html#map_hash_bucket_size)
 
 ## variables-hash-max-size
 
 Sets the maximum size of the variables hash table.
 
 _References:_
-[https://nginx.org/en/docs/http/ngx_http_map_module.html#variables_hash_max_size](https://nginx.org/en/docs/http/ngx_http_map_module.html#variables_hash_max_size)
+[https://nginx.org/en/docs/http/ngx_http_map_module.html#map_hash_max_size](https://nginx.org/en/docs/http/ngx_http_map_module.html#map_hash_max_size)
 
 ## upstream-keepalive-connections
 
@@ -835,7 +835,7 @@ Sets the maximum time during which requests can be processed through one keepali
  _**default:**_ "1h"
 
 _References:_
-[http://nginx.org/en/docs/http/ngx_http_upstream_module.html#keepalive_time](http://nginx.org/en/docs/http/ngx_http_upstream_module.html#keepalive_time)
+[https://nginx.org/en/docs/http/ngx_http_upstream_module.html#keepalive_time](https://nginx.org/en/docs/http/ngx_http_upstream_module.html#keepalive_time)
 
 ## upstream-keepalive-timeout
 
@@ -1368,7 +1368,7 @@ Enables debugging log for selected client connections.
 _**default:**_ ""
 
 _References:_
-[http://nginx.org/en/docs/ngx_core_module.html#debug_connection](http://nginx.org/en/docs/ngx_core_module.html#debug_connection)
+[https://nginx.org/en/docs/ngx_core_module.html#debug_connection](https://nginx.org/en/docs/ngx_core_module.html#debug_connection)
 
 ## strict-validate-path-type
 

internal/ingress/annotations/authreq/main.go

@@ -250,7 +250,7 @@ var (
 	methodsRegex    = regexp.MustCompile("(GET|HEAD|POST|PUT|PATCH|DELETE|CONNECT|OPTIONS|TRACE)")
 	headerRegexp    = regexp.MustCompile(`^[a-zA-Z\d\-_]+$`)
 	statusCodeRegex = regexp.MustCompile(`^\d{3}$`)
-	durationRegex   = regexp.MustCompile(`^\d+(ms|s|m|h|d|w|M|y)$`) // see http://nginx.org/en/docs/syntax.html
+	durationRegex   = regexp.MustCompile(`^\d+(ms|s|m|h|d|w|M|y)$`) // see https://nginx.org/en/docs/syntax.html
 )
 
 // ValidMethod checks is the provided string a valid HTTP method

internal/ingress/annotations/ratelimit/main.go

@@ -99,7 +99,7 @@ func (rt1 *Config) Equal(rt2 *Config) bool {
 }
 
 // Zone returns information about the NGINX rate limit (limit_req_zone)
-// http://nginx.org/en/docs/http/ngx_http_limit_req_module.html#limit_req_zone
+// https://nginx.org/en/docs/http/ngx_http_limit_req_module.html#limit_req_zone
 type Zone struct {
 	Name  string `json:"name"`
 	Limit int    `json:"limit"`

internal/ingress/controller/template/template.go

@@ -993,7 +993,7 @@ func buildNextUpstream(i, r interface{}) string {
 	return strings.Join(nextUpstreamCodes, " ")
 }
 
-// refer to http://nginx.org/en/docs/syntax.html
+// refer to https://nginx.org/en/docs/syntax.html
 // Nginx differentiates between size and offset
 // offset directives support gigabytes in addition
 var (
@@ -1002,7 +1002,7 @@ var (
 )
 
 // isValidByteSize validates size units valid in nginx
-// http://nginx.org/en/docs/syntax.html
+// https://nginx.org/en/docs/syntax.html
 func isValidByteSize(input interface{}, isOffset bool) bool {
 	s, ok := input.(string)
 	if !ok {

internal/ingress/controller/util.go

@@ -75,7 +75,7 @@ func upstreamServiceNameAndPort(service *networking.IngressServiceBackend) (stri
 
 // sysctlSomaxconn returns the maximum number of connections that can be queued
 // for acceptance (value of net.core.somaxconn)
-// http://nginx.org/en/docs/http/ngx_http_core_module.html#listen
+// https://nginx.org/en/docs/http/ngx_http_core_module.html#listen
 func sysctlSomaxconn() int {
 	maxConns, err := getSysctl("net/core/somaxconn")
 	if err != nil || maxConns < 512 {

internal/ingress/defaults/main.go

@@ -26,8 +26,8 @@ type Backend struct {
 	AppRoot string `json:"app-root"`
 
 	// enables which HTTP codes should be passed for processing with the error_page directive
-	// http://nginx.org/en/docs/http/ngx_http_proxy_module.html#proxy_intercept_errors
-	// http://nginx.org/en/docs/http/ngx_http_core_module.html#error_page
+	// https://nginx.org/en/docs/http/ngx_http_proxy_module.html#proxy_intercept_errors
+	// https://nginx.org/en/docs/http/ngx_http_core_module.html#error_page
 	// By default this is disabled
 	CustomHTTPErrors []int `json:"custom-http-errors"`
 
@@ -37,77 +37,77 @@ type Backend struct {
 	// allows usage of CustomHTTPErrors without intercepting service errors
 	// e.g. custom 404 and 503 when service-a does not exist or is not available
 	// but service-a can return 404 and 503 error codes without intercept
-	// http://nginx.org/en/docs/http/ngx_http_proxy_module.html#proxy_intercept_errors
+	// https://nginx.org/en/docs/http/ngx_http_proxy_module.html#proxy_intercept_errors
 	// By default this is false
 	DisableProxyInterceptErrors bool `json:"disable-proxy-intercept-errors"`
 
-	// http://nginx.org/en/docs/http/ngx_http_core_module.html#client_max_body_size
+	// https://nginx.org/en/docs/http/ngx_http_core_module.html#client_max_body_size
 	// Sets the maximum allowed size of the client request body
 	ProxyBodySize string `json:"proxy-body-size"`
 
 	// Defines a timeout for establishing a connection with a proxied server.
 	// It should be noted that this timeout cannot usually exceed 75 seconds.
-	// http://nginx.org/en/docs/http/ngx_http_proxy_module.html#proxy_connect_timeout
+	// https://nginx.org/en/docs/http/ngx_http_proxy_module.html#proxy_connect_timeout
 	ProxyConnectTimeout int `json:"proxy-connect-timeout"`
 
 	// Timeout in seconds for reading a response from the proxied server. The timeout is set only between
 	// two successive read operations, not for the transmission of the whole response
-	// http://nginx.org/en/docs/http/ngx_http_proxy_module.html#proxy_read_timeout
+	// https://nginx.org/en/docs/http/ngx_http_proxy_module.html#proxy_read_timeout
 	ProxyReadTimeout int `json:"proxy-read-timeout"`
 
 	// Timeout in seconds for transmitting a request to the proxied server. The timeout is set only between
 	// two successive write operations, not for the transmission of the whole request.
-	// http://nginx.org/en/docs/http/ngx_http_proxy_module.html#proxy_send_timeout
+	// https://nginx.org/en/docs/http/ngx_http_proxy_module.html#proxy_send_timeout
 	ProxySendTimeout int `json:"proxy-send-timeout"`
 
 	// Sets the number of the buffers used for reading a response from the proxied server
-	// http://nginx.org/en/docs/http/ngx_http_proxy_module.html#proxy_buffers
+	// https://nginx.org/en/docs/http/ngx_http_proxy_module.html#proxy_buffers
 	ProxyBuffersNumber int `json:"proxy-buffers-number"`
 
 	// Sets the size of the buffer used for reading the first part of the response received from the
 	// proxied server. This part usually contains a small response header.
-	// http://nginx.org/en/docs/http/ngx_http_proxy_module.html#proxy_buffer_size)
+	// https://nginx.org/en/docs/http/ngx_http_proxy_module.html#proxy_buffer_size
 	ProxyBufferSize string `json:"proxy-buffer-size"`
 
 	// Limits the total size of buffers that can be busy sending a response to the client while
 	// the response is not yet fully read.
-	// http://nginx.org/en/docs/http/ngx_http_proxy_module.html#proxy_busy_buffers_size
+	// https://nginx.org/en/docs/http/ngx_http_proxy_module.html#proxy_busy_buffers_size
 	ProxyBusyBuffersSize string `json:"proxy-busy-buffers-size"`
 
 	// Sets a text that should be changed in the path attribute of the “Set-Cookie” header fields of
 	// a proxied server response.
-	// http://nginx.org/en/docs/http/ngx_http_proxy_module.html#proxy_cookie_path
+	// https://nginx.org/en/docs/http/ngx_http_proxy_module.html#proxy_cookie_path
 	ProxyCookiePath string `json:"proxy-cookie-path"`
 
 	// Sets a text that should be changed in the domain attribute of the “Set-Cookie” header fields
 	// of a proxied server response.
-	// http://nginx.org/en/docs/http/ngx_http_proxy_module.html#proxy_cookie_domain
+	// https://nginx.org/en/docs/http/ngx_http_proxy_module.html#proxy_cookie_domain
 	ProxyCookieDomain string `json:"proxy-cookie-domain"`
 
 	// Specifies in which cases a request should be passed to the next server.
-	// http://nginx.org/en/docs/http/ngx_http_proxy_module.html#proxy_next_upstream
+	// https://nginx.org/en/docs/http/ngx_http_proxy_module.html#proxy_next_upstream
 	ProxyNextUpstream string `json:"proxy-next-upstream"`
 
 	// Limits the time during which a request can be passed to the next server.
-	// http://nginx.org/en/docs/http/ngx_http_proxy_module.html#proxy_next_upstream_timeout
+	// https://nginx.org/en/docs/http/ngx_http_proxy_module.html#proxy_next_upstream_timeout
 	ProxyNextUpstreamTimeout int `json:"proxy-next-upstream-timeout"`
 
 	// Limits the number of possible tries for passing a request to the next server.
 	// https://nginx.org/en/docs/http/ngx_http_proxy_module.html#proxy_next_upstream_tries
 	ProxyNextUpstreamTries int `json:"proxy-next-upstream-tries"`
 
 	// Sets the original text that should be changed in the "Location" and "Refresh" header fields of a proxied server response.
-	// http://nginx.org/en/docs/http/ngx_http_proxy_module.html#proxy_redirect
+	// https://nginx.org/en/docs/http/ngx_http_proxy_module.html#proxy_redirect
 	// Default: off
 	ProxyRedirectFrom string `json:"proxy-redirect-from"`
 
 	// Sets the replacement text that should be changed in the "Location" and "Refresh" header fields of a proxied server response.
-	// http://nginx.org/en/docs/http/ngx_http_proxy_module.html#proxy_redirect
+	// https://nginx.org/en/docs/http/ngx_http_proxy_module.html#proxy_redirect
 	// Default: off
 	ProxyRedirectTo string `json:"proxy-redirect-to"`
 
 	// Enables or disables buffering of a client request body.
-	// http://nginx.org/en/docs/http/ngx_http_proxy_module.html#proxy_request_buffering
+	// https://nginx.org/en/docs/http/ngx_http_proxy_module.html#proxy_request_buffering
 	ProxyRequestBuffering string `json:"proxy-request-buffering"`
 
 	// Name server/s used to resolve names of upstream servers into IP addresses.
@@ -131,14 +131,14 @@ type Backend struct {
 	UsePortInRedirects bool `json:"use-port-in-redirects"`
 
 	// Enables or disables relative redirects. By default nginx uses absolute redirects.
-	// http://nginx.org/en/docs/http/ngx_http_core_module.html#absolute_redirect
+	// https://nginx.org/en/docs/http/ngx_http_core_module.html#absolute_redirect
 	// Default: false
 	RelativeRedirects bool `json:"relative-redirects"`
 
 	// Enable stickiness by client-server mapping based on a NGINX variable, text or a combination of both.
 	// A consistent hashing method will be used which ensures only a few keys would be remapped to different
 	// servers on upstream group changes
-	// http://nginx.org/en/docs/http/ngx_http_upstream_module.html#hash
+	// https://nginx.org/en/docs/http/ngx_http_upstream_module.html#hash
 	UpstreamHashBy string `json:"upstream-hash-by"`
 
 	// Consistent hashing subset flag.
@@ -153,34 +153,34 @@ type Backend struct {
 	LoadBalancing string `json:"load-balance"`
 
 	// WhitelistSourceRange allows limiting access to certain client addresses
-	// http://nginx.org/en/docs/http/ngx_http_access_module.html
+	// https://nginx.org/en/docs/http/ngx_http_access_module.html
 	WhitelistSourceRange []string `json:"whitelist-source-range"`
 
 	// DenylistSourceRange allows limiting access to certain client addresses
-	// http://nginx.org/en/docs/http/ngx_http_access_module.html
+	// https://nginx.org/en/docs/http/ngx_http_access_module.html
 	DenylistSourceRange []string `json:"denylist-source-range"`
 
 	// Limits the rate of response transmission to a client.
 	// The rate is specified in bytes per second. The zero value disables rate limiting.
 	// The limit is set per a request, and so if a client simultaneously opens two connections,
 	// the overall rate will be twice as much as the specified limit.
-	// http://nginx.org/en/docs/http/ngx_http_core_module.html#limit_rate
+	// https://nginx.org/en/docs/http/ngx_http_core_module.html#limit_rate
 	LimitRate int `json:"limit-rate"`
 
 	// Sets the initial amount after which the further transmission of a response to a client will be rate limited.
-	// http://nginx.org/en/docs/http/ngx_http_core_module.html#limit_rate_after
+	// https://nginx.org/en/docs/http/ngx_http_core_module.html#limit_rate_after
 	LimitRateAfter int `json:"limit-rate-after"`
 
 	// Enables or disables buffering of responses from the proxied server.
-	// http://nginx.org/en/docs/http/ngx_http_proxy_module.html#proxy_buffering
+	// https://nginx.org/en/docs/http/ngx_http_proxy_module.html#proxy_buffering
 	ProxyBuffering string `json:"proxy-buffering"`
 
 	// Modifies the HTTP version the proxy uses to interact with the backend.
-	// http://nginx.org/en/docs/http/ngx_http_proxy_module.html#proxy_http_version
+	// https://nginx.org/en/docs/http/ngx_http_proxy_module.html#proxy_http_version
 	ProxyHTTPVersion string `json:"proxy-http-version"`
 
 	// Sets the maximum temp file size when proxy-buffers capacity is exceeded.
-	// http://nginx.org/en/docs/http/ngx_http_proxy_module.html#proxy_max_temp_file_size
+	// https://nginx.org/en/docs/http/ngx_http_proxy_module.html#proxy_max_temp_file_size
 	ProxyMaxTempFileSize string `json:"proxy-max-temp-file-size"`
 
 	// By default, the NGINX ingress controller uses a list of all endpoints (Pod IP/port) in the NGINX upstream configuration.

internal/nginx/main.go

@@ -55,7 +55,7 @@ var HealthPath = "/healthz"
 var HealthCheckTimeout = 10 * time.Second
 
 // StatusPath defines the path used to expose the NGINX status page
-// http://nginx.org/en/docs/http/ngx_http_stub_status_module.html
+// https://nginx.org/en/docs/http/ngx_http_stub_status_module.html
 var StatusPath = "/nginx_status"
 
 // StreamPort defines the port used by NGINX for the NGINX stream configuration socket

rootfs/etc/nginx/lua/util/split.lua

@@ -24,7 +24,7 @@ function _M.get_last_value(var)
   return t[#t]
 end
 
--- http://nginx.org/en/docs/http/ngx_http_upstream_module.html#example
+-- https://nginx.org/en/docs/http/ngx_http_upstream_module.html#example
 -- CAVEAT: nginx is giving out : instead of , so the docs are wrong
 -- 127.0.0.1:26157 : 127.0.0.1:26157 , ngx.var.upstream_addr
 -- 200 : 200 , ngx.var.upstream_status

rootfs/etc/nginx/template/nginx.tmpl

@@ -42,7 +42,7 @@ worker_cpu_affinity {{ $cfg.WorkerCPUAffinity }};
 
 worker_rlimit_nofile {{ $cfg.MaxWorkerOpenFiles }};
 
-{{/* http://nginx.org/en/docs/ngx_core_module.html#worker_shutdown_timeout */}}
+{{/* https://nginx.org/en/docs/ngx_core_module.html#worker_shutdown_timeout */}}
 {{/* avoid waiting too long during a reload */}}
 worker_shutdown_timeout {{ $cfg.WorkerShutdownTimeout }} ;
 
@@ -351,7 +351,7 @@ http {
     log_format upstreaminfo {{ if $cfg.LogFormatEscapeNone }}escape=none {{ else if $cfg.LogFormatEscapeJSON }}escape=json {{ end }}'{{ $cfg.LogFormatUpstream }}';
 
     {{/* map urls that should not appear in access.log */}}
-    {{/* http://nginx.org/en/docs/http/ngx_http_log_module.html#access_log */}}
+    {{/* https://nginx.org/en/docs/http/ngx_http_log_module.html#access_log */}}
     map $request_uri $loggable {
         {{ range $reqUri := $cfg.SkipAccessLogURLs }}
         {{ $reqUri }} 0;{{ end }}
@@ -380,7 +380,7 @@ http {
     map $http_upgrade $connection_upgrade {
         default          upgrade;
         {{ if (gt $cfg.UpstreamKeepaliveConnections 0) }}
-        # See http://nginx.org/en/docs/http/ngx_http_upstream_module.html#keepalive
+        # See https://nginx.org/en/docs/http/ngx_http_upstream_module.html#keepalive
         ''               '';
         {{ else }}
         ''               close;
@@ -480,7 +480,7 @@ http {
     {{ end }}
 
     {{ if not (empty $cfg.SSLDHParam) }}
-    # allow custom DH file http://nginx.org/en/docs/http/ngx_http_ssl_module.html#ssl_dhparam
+    # allow custom DH file https://nginx.org/en/docs/http/ngx_http_ssl_module.html#ssl_dhparam
     ssl_dhparam {{ $cfg.SSLDHParam }};
     {{ end }}
 
@@ -1113,7 +1113,7 @@ stream {
             # The target is an upstream with HTTP keepalive, that is why the
             # Connection header is cleared and the HTTP version is set to 1.1 as
             # the Nginx documentation suggests:
-            # http://nginx.org/en/docs/http/ngx_http_upstream_module.html#keepalive
+            # https://nginx.org/en/docs/http/ngx_http_upstream_module.html#keepalive
             proxy_http_version 1.1;
             proxy_set_header Connection "";
             set $target {{ changeHostPort $externalAuth.URL $authUpstreamName }};

test/data/cleanConf.expected.conf

@@ -84,7 +84,7 @@ http {
 	map $http_upgrade $connection_upgrade {
 		default          upgrade;
 
-		# See http://nginx.org/en/docs/http/ngx_http_upstream_module.html#keepalive
+		# See https://nginx.org/en/docs/http/ngx_http_upstream_module.html#keepalive
 		''               '';
 
 	}

test/data/cleanConf.src.conf

@@ -113,7 +113,7 @@ lua_shared_dict ocsp_response_cache 5M;
     map $http_upgrade $connection_upgrade {
         default          upgrade;
 
-        # See http://nginx.org/en/docs/http/ngx_http_upstream_module.html#keepalive
+        # See https://nginx.org/en/docs/http/ngx_http_upstream_module.html#keepalive
         ''               '';
 
     }