Hi,
i have Nginx working as Https Reverse Proxy before a Apache.
at http all is running but at https with installed certifications i have in IE this question:
"Do you want to view only the webpage content that was delivered securely?"
the are the config:
server {
listen 80;
server_name xxx.xxx.com;
rewrite ^/(.*) https://xxx.xxx.com/ permanent;
}
server {
listen 443;
server_name xxx.xxx.com;
add_header Front-End-Https on;
keepalive_timeout 70;
ssl on;
ssl_certificate /etc/ssl/private/xxx.crt;
ssl_certificate_key /etc/ssl/private/xxx.key;
ssl_protocols SSLv2 SSLv3 TLSv1;
ssl_ciphers ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP;
ssl_prefer_server_ciphers on;
location / {
proxy_pass http://cluster;
proxy_redirect off;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_buffers 4 32k;
proxy_set_header X-Forwarded-Proto https;
}
}