From a396f16e649ac19680c0dfd4d3cdcce726593e5d Mon Sep 17 00:00:00 2001 From: PetrSvirak Date: Sat, 28 Sep 2024 10:40:26 +0200 Subject: [PATCH] chore(docs): Update nginx example config This tweak in nginx example should make all request made by immich web app go through SSL by default, not requiring other ports than 443 opened to outboud connections. --- docs/docs/administration/reverse-proxy.md | 9 +++++---- 1 file changed, 5 insertions(+), 4 deletions(-) diff --git a/docs/docs/administration/reverse-proxy.md b/docs/docs/administration/reverse-proxy.md index c40fecbdc4c23..79f4ccccdf299 100644 --- a/docs/docs/administration/reverse-proxy.md +++ b/docs/docs/administration/reverse-proxy.md @@ -18,10 +18,11 @@ server { client_max_body_size 50000M; # Set headers - proxy_set_header Host $http_host; - proxy_set_header X-Real-IP $remote_addr; - proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; - proxy_set_header X-Forwarded-Proto $scheme; + proxy_set_header Host $http_host; + proxy_set_header X-Real-IP $remote_addr; + proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; + proxy_set_header X-Forwarded-Proto $scheme; + add_header 'Content-Security-Policy' 'upgrade-insecure-requests'; # enable websockets: http://nginx.org/en/docs/http/websocket.html proxy_http_version 1.1;