Nginx – In Nginx, how can I rewrite all http requests to https while maintaining sub-domain

httpsnginxredirect

I want to rewrite all http requests on my web server to be https requests, I started with the following:

server {
    listen      80;

    location / {
      rewrite     ^(.*)   https://mysite.com$1 permanent;
    }
...

One Problem is that this strips away any subdomain information (e.g., node1.mysite.com/folder), how could I rewrite the above to reroute everything to https and maintain the sub-domain?

Best Answer

Correct way in new versions of nginx

Turn out my first answer to this question was correct at certain time, but it turned into another pitfall - to stay up to date please check Taxing rewrite pitfalls

I have been corrected by many SE users, so the credit goes to them, but more importantly, here is the correct code:

server {
       listen         80;
       server_name    my.domain.com;
       return         301 https://$server_name$request_uri;
}

server {
       listen         443 ssl;
       server_name    my.domain.com;
       # add Strict-Transport-Security to prevent man in the middle attacks
       add_header Strict-Transport-Security "max-age=31536000" always; 

       [....]
}

Related Solutions

Nginx HTTPS serving with same config as HTTP

You can combine this into one server block like so:

server {
    listen 80;
    listen 443 default_server ssl;

    # other directives
}

Official How-To

Nginx – with nginx having the base url rewrite to https

I ended up changing the $uri to $request_uri so args can be handled without redirect loops.

server {
  listen              443;
  set $ssltoggle 2;
  if ($uri ~ ^/(img|js|css|static)/) {
      set $ssltoggle 1;
  }
  if ($request_uri = '/') {
      set $ssltoggle 1;
  }
  if ($ssltoggle != 1) {
      rewrite ^(.*)$ http://$server_name$1 permanent;
  }
}

Then I changed the http block to do an immediate rewrite if the location was = /

server {
  listen              80;
  location = / {
      rewrite ^(.*)$ https://$server_name$1 permanent;
  }
  if ($ssltoggle = 1) {
      rewrite ^(.*)$ https://$server_name$1 permanent;
  }
}

I have the IF statements still to handle other rewrites and then all the specific serving is done below those. It's probably just my specific configuration that results in redirect loops and errors when I attempt to handle everything as Christopher suggested or the way I originally presented in my question.

Best Answer

Correct way in new versions of nginx

Related Solutions

Nginx HTTPS serving with same config as HTTP

Nginx – with nginx having the base url rewrite to https

Related Topic