From 4d595534389becb4f302ffa3fbaaad1fb3aef427 Mon Sep 17 00:00:00 2001 From: Kai Fett Date: Fri, 28 Feb 2025 23:40:59 +0100 Subject: [PATCH] Some changes to enable API working over https behind reverse proxy. See https://github.com/paperless-ngx/paperless-ngx/issues/9263 --- Using-a-Reverse-Proxy-with-Paperless-ngx.md | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/Using-a-Reverse-Proxy-with-Paperless-ngx.md b/Using-a-Reverse-Proxy-with-Paperless-ngx.md index ddfdb2c..71bc05b 100644 --- a/Using-a-Reverse-Proxy-with-Paperless-ngx.md +++ b/Using-a-Reverse-Proxy-with-Paperless-ngx.md @@ -28,10 +28,11 @@ http { proxy_set_header Connection "upgrade"; proxy_redirect off; - proxy_set_header Host $host; + proxy_set_header Host $host:$server_port; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header X-Forwarded-Host $server_name; + proxy_set_header X-Forwarded-Proto $scheme; add_header Referrer-Policy "strict-origin-when-cross-origin"; } } @@ -39,7 +40,7 @@ http { ``` The `PAPERLESS_URL` configuration variable is also required when using a -reverse proxy; consider setting `USE_X_FORWARD_HOST=true` and `USE_X_FORWARD_PORT=true`. Please refer to the [hosting and security](https://docs.paperless-ngx.com/configuration/#hosting-and-security) docs. +reverse proxy; consider setting `USE_X_FORWARD_HOST=true`, `USE_X_FORWARD_PORT=true` and `PAPERLESS_PROXY_SSL_HEADER='["HTTP_X_FORWARDED_PROTO", "https"]'`. Please refer to the [hosting and security](https://docs.paperless-ngx.com/configuration/#hosting-and-security) docs. When using a domain subpath (e.g. `/paperless`), you need to set `PAPERLESS_FORCE_SCRIPT_NAME=/paperless` and adjust `proxy_pass` as well: