2

我在 https 上运行带有 puma 的 Nginx 服务器。我为 SSL 验证配置了 Letsencrypt。问题是服务器运行良好但是当我尝试通过设计创建用户时会抛出此错误

“HTTP Origin 标头 ( https://example.com ) 与 request.base_url ( http://example.com )不匹配”

我尝试修改此处指定的 nginx.conf 配置 https://github.com/rails/rails/issues/22965#issuecomment-172929004

但是，这里没有运气是我的配置文件

upstream puma {

  server unix:///home/ubuntu/blue_whale/example/shared/tmp/sockets/gofickle-puma.sock;
}

server
{
    listen 443 ssl default;
    server_name example.com;
    ssl_certificate /etc/letsencrypt/live/example.com/fullchain.pem;
    ssl_certificate_key /etc/letsencrypt/live/example.com/privkey.pem;

    root /home/ubuntu/blue_whale/example/current/public;
    access_log /home/ubuntu/blue_whale/example/current/log/nginx.access.log;
    error_log /home/ubuntu/blue_whale/example/current/log/nginx.error.log info;

    add_header Strict-Transport-Security “max-age=31536000”;


  location ^~ /assets/ {
    gzip_static on;
    expires max;
    add_header Cache-Control public;
  }

  try_files $uri/index.html $uri @puma;
  location / {
    proxy_set_header  Host $host;
    proxy_set_header  X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header  X-Forwarded-Proto $scheme;
    proxy_set_header  X-Forwarded-Ssl on; # Optional
    proxy_set_header  X-Forwarded-Port $server_port;
    proxy_set_header  X-Forwarded-Host $host;

    proxy_pass http://puma;
  }
4

1 回答 1

2

我的设置与您完全相同，我正在使用以下代理配置：

  location @rails {
    proxy_set_header  X-Real-IP $remote_addr;
    proxy_set_header  X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header  Host $http_host;
    proxy_redirect off;
    proxy_pass http://rails_app;
  }

我认为可能是 X-Forwarded-Proto 和 SSL 可能会导致您的问题，在代理后面没有必要。

于 2018-11-20T20:51:40.073 回答