# SSL problem with SSL proxy

**URL:** https://meta.discourse.org/t/ssl-problem-with-ssl-proxy/115092
**Category:** Self-hosting
**Created:** [April 15, 2019, 11:34am UTC](https://meta.discourse.org/t/ssl-problem-with-ssl-proxy/115092 "2019-04-15T11:34:26Z")
**Posts on this page:** 7
**Page:** 1

<div class="post-metadata">

### Author: ![Torwald](https://avatars.discourse-cdn.com/v4/letter/t/c5a1d2/32.png) [@Torwald](https://meta.discourse.org/u/Torwald)
#### Post date: [April 15, 2019, 11:34am UTC](https://meta.discourse.org/t/ssl-problem-with-ssl-proxy/115092/1 "2019-04-15T11:34:26Z")

</div>

Good day!

I have installed NGINX Reverse Proxy before Discourse, where certificates are managed, so the user connects to Discourse via a secure HTTPS connection.

However, some template files, such as icons, are downloaded over HTTP, which causes Firefox to report an insecure connection. These files are:

```
<link rel="apple-touch-icon" type="image/png" href="http://
<link rel="search" type="application/opensearchdescription+xml"
<meta name="twitter:image"

```

and other.

If I enable the “Force HTTPs” mode in the settings, this problem disappears, but there is another - I can neither create categories, nor create new topics, nor even log in - the forum gives the 403rd error.

Version 2.3.0 is currently installed.beta 8 +123.

Thank you in advance

---

<div class="post-metadata">

### Author: ![pfaffman](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/pfaffman/32/120154_2.png) [@pfaffman](https://meta.discourse.org/u/pfaffman)
#### Post date: [April 15, 2019, 11:44am UTC](https://meta.discourse.org/t/ssl-problem-with-ssl-proxy/115092/2 "2019-04-15T11:44:39Z")

</div>

There is a site setting called

```
  force https

```

Enable it.

---

<div class="post-metadata">

### Author: ![Torwald](https://avatars.discourse-cdn.com/v4/letter/t/c5a1d2/32.png) [@Torwald](https://meta.discourse.org/u/Torwald)
#### Post date: [April 15, 2019, 11:50am UTC](https://meta.discourse.org/t/ssl-problem-with-ssl-proxy/115092/3 "2019-04-15T11:50:23Z")

</div>

If I enable the “Force HTTPs” mode in the settings, this problem disappears, but there is another - I can neither create categories, nor create new topics, nor even log in - the forum gives the 403rd error.

E-Mail confirmation also don’t work when force https enabled.

---

<div class="post-metadata">

### Author: ![Torwald](https://avatars.discourse-cdn.com/v4/letter/t/c5a1d2/32.png) [@Torwald](https://meta.discourse.org/u/Torwald)
#### Post date: [April 15, 2019, 12:57pm UTC](https://meta.discourse.org/t/ssl-problem-with-ssl-proxy/115092/4 "2019-04-15T12:57:23Z")

</div>

Here [is solution](https://meta.discourse.org/t/error-403-when-trying-to-add-articles-or-change-any-options/52491/13), maybe it will help for someone:

Just add

> `proxy_set_header X-Forwarded-Proto https;`

to NGINX proxy config.

Thnx a lot!

---

<div class="post-metadata">

### Author: ![codinghorror](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/codinghorror/32/110067_2.png) [@codinghorror](https://meta.discourse.org/u/codinghorror)
#### Post date: [April 15, 2019, 11:48pm UTC](https://meta.discourse.org/t/ssl-problem-with-ssl-proxy/115092/5 "2019-04-15T23:48:38Z")

</div>

This is covered in many, many topics here..

---

<div class="post-metadata">

### Author: ![system](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/system/32/443519_2.png) [@system](https://meta.discourse.org/u/system)
#### Post date: [July 13, 2022, 1:58am UTC](https://meta.discourse.org/t/ssl-problem-with-ssl-proxy/115092/6 "2022-07-13T01:58:43Z")

</div>



---

<div class="post-metadata">

### Author: ![JammyDodger](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/jammydodger/32/254611_2.png) [@JammyDodger](https://meta.discourse.org/u/JammyDodger)
#### Post date: [July 13, 2022, 10:16am UTC](https://meta.discourse.org/t/ssl-problem-with-ssl-proxy/115092/7 "2022-07-13T10:16:40Z")

</div>


