# Front nginx https reverse proxy to discourse http

**URL:** https://meta.discourse.org/t/front-nginx-https-reverse-proxy-to-discourse-http/106000
**Category:** Self-hosting
**Created:** [January 8, 2019, 8:27pm UTC](https://meta.discourse.org/t/front-nginx-https-reverse-proxy-to-discourse-http/106000 "2019-01-08T20:27:27Z")
**Posts on this page:** 4
**Page:** 1

<div class="post-metadata">

### Author: ![danchik](https://avatars.discourse-cdn.com/v4/letter/d/e19b73/32.png) [@danchik](https://meta.discourse.org/u/danchik)
#### Post date: [January 8, 2019, 8:27pm UTC](https://meta.discourse.org/t/front-nginx-https-reverse-proxy-to-discourse-http/106000/1 "2019-01-08T20:27:28Z")

</div>

Hello

I have nginx runnig on 443 accepting traffic on `https://discourse.example.com` and sending it to discourse on that is running on port 8080…

When I connect to `https://discourse.example.com` the discourse serves welcome page and issues a warning: “Your connection to this site is not fully secured” (and it claims that some links and images on page are mixed) …

I can see all traffic being served via https, and the few http requests that appear get redirected and re-requested on https…

looking at the page source of the served discourse welcome page, I found a few http: // references (where I would expect https: //)  
for example: `<link rel="apple-touch-icon" type="image/png" href="http://discourse.example.com/images/default-apple-touch-icon.png"...`  
or: `href="http://discourse.example.com/opensearch.xml"`…

How does one change so that that it provides everything via https??  
this is what my nginx has for 443 port:

```
location / {
            proxy_pass http://localhost:8080;
            proxy_set_header Host $http_host;
            proxy_http_version 1.1;
            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
            proxy_set_header X-Forwarded-Proto https;
            proxy_set_header X-Forwarded-Host $host:443; # added this no help
            proxy_set_header X-Forwarded-Port 443; # added this no help
            add_header Front-End-Https on; # added this no help
            proxy_set_header X-Real-IP $remote_addr; # added this no help
        }

```

* * *

exact error (except with different domain name) is :  
`SEC7137: [Mixed-Content] The origin 'https://discorurse.example.com' was loaded in a secure context and loaded an optionally blockable insecure image resource at 'http://discourse.example.com/uploads/default/original/1X/a49b3195c893e60f12b7829dd86f40b1790269fb.png'.`

Thank you

---

<div class="post-metadata">

### Author: ![Falco](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/falco/32/179432_2.png) [@Falco](https://meta.discourse.org/u/Falco)
#### Post date: [January 8, 2019, 9:37pm UTC](https://meta.discourse.org/t/front-nginx-https-reverse-proxy-to-discourse-http/106000/2 "2019-01-08T21:37:11Z")

</div>

Check the `force_https` site setting in the admin console.

---

<div class="post-metadata">

### Author: ![danchik](https://avatars.discourse-cdn.com/v4/letter/d/e19b73/32.png) [@danchik](https://meta.discourse.org/u/danchik)
#### Post date: [January 8, 2019, 10:00pm UTC](https://meta.discourse.org/t/front-nginx-https-reverse-proxy-to-discourse-http/106000/3 "2019-01-08T22:00:02Z")

</div>

Thank you, that looks to have worked.

---

<div class="post-metadata">

### Author: ![zogstrip](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/zogstrip/32/512781_2.png) [@zogstrip](https://meta.discourse.org/u/zogstrip)
#### Post date: [January 23, 2019, 5:32pm UTC](https://meta.discourse.org/t/front-nginx-https-reverse-proxy-to-discourse-http/106000/4 "2019-01-23T17:32:16Z")

</div>