fix: add X-Forwarded-Proto header to HTTPS frontend for backend connection awareness

2026-03-22 22:51:43 +00:00
parent 2d8ae617c6
commit 7dab63b83c
1 changed files with 3 additions and 1 deletions
--- a/ansible/haproxy/haproxy.cfg.j2
+++ b/ansible/haproxy/haproxy.cfg.j2
@@ -59,6 +59,8 @@ frontend https_frontend
    mode http
    option httplog
    option forwardfor
+    # Tell backends the original connection was HTTPS (TLS terminates here)
+    http-request set-header X-Forwarded-Proto https

    # Security headers
    http-response set-header Strict-Transport-Security "max-age=31536000; includeSubDomains"