sameersbn / sameersbn/docker-gitlab

Mixed HTTP / HTTPS content with Gitlab behind a reverse proxy

Open
#1,202 19 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

wontfix
Dominant language
Shell
Stars
8.1k
Forks
2.1k
Avg merge
17h 47m
Merged PRs (30d)
7

Description

I'm running sameersbn/docker behind a nginx reverse proxy, but I get a mixed content warning on the avatar image.

No matter what I try, it is either the mixed content warning or a too many redirects error page.
I forward my http traffic automatically in nginx with this config:

server
{
    listen 80;
    server_name myserver.com;
    return 301 https://myserver.com$request_uri;
}

server
{
    listen 443 ssl;
    server_name myserver.com;

    ssl on;
    ssl_certificate myserver.cert.combined;
    ssl_certificate_key myserver.key;
    include nginx_php.conf;

    location / {
       proxy_set_header X-Forwarded-Proto: https;
       proxy_set_header X-Forwarded-Ssl: on;
       proxy_pass http://127.0.0.1:10080;
       proxy_redirect off;
       proxy_set_header Host $host;
       proxy_set_header X-Real-IP $remote_addr;
       proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    }

    include /etc/nginx/webapps.ssl.conf;
}

As soon as I run my gitlab container with the following options, I get the too many redirects

- GITLAB_HTTPS=true
- SSL_SELF_SIGNED=false

- GITLAB_HOST=myserver.com
- GITLAB_PORT=443
- GITLAB_SSH_PORT=22

What am I doing wrong here? And why does Gitlab try to load the avatar over http?

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start with the supplied nginx reverse-proxy configuration and the GITLAB_HTTPS, SSL_SELF_SIGNED, GITLAB_HOST, and GITLAB_PORT container options. Reproduce the mixed-content and redirect behavior, then inspect the generated avatar URL and forwarded-protocol handling; done means HTTPS works without redirect loops and avatar requests use HTTPS.

Written by the indexing model from the issue text.

Assessment

Tech stack
docker, nginx
Domain
devops, infrastructure
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.