NGINX – return 301 keeps redirecting to HTTP instead of HTTPS

301-redirecthttpsnginx

I have the following configuration:

server{ 
  ssl on;
  listen 443 ssl;
  ...
  location = / {
    return 301 https://$host/appName;
  }
  location = /appName {
    ...
    proxy_pass $some_internal_server;
    ...
  }
}

When I type in a browser https://my_url I'm redirected to http://my_url/appName instead of https://my_url/appName

How can I fix this?

Best Answer

The best way to fix a 301 is another 301.

301 is browser cache, add a 301 on http back to https

Correct way in new versions of nginx

Turn out my first answer to this question was correct at certain time, but it turned into another pitfall - to stay up to date please check Taxing rewrite pitfalls

I have been corrected by many SE users, so the credit goes to them, but more importantly, here is the correct code:

server {
       listen         80;
       server_name    my.domain.com;
       return         301 https://$server_name$request_uri;
}

server {
       listen         443 ssl;
       server_name    my.domain.com;
       # add Strict-Transport-Security to prevent man in the middle attacks
       add_header Strict-Transport-Security "max-age=31536000" always; 

       [....]
}

Best Answer

Related Solutions

Ssl – Apache2 https keeps redirecting (301) to http

NGINX Redirect – How to Rewrite All HTTP Requests to HTTPS While Maintaining Sub-Domain

Correct way in new versions of nginx

Related Topic