thib8956/nginx-proxy
1
0
Fork 0
mirror of https://github.com/thib8956/nginx-proxy synced 2025-02-24 01:38:15 +00:00
Code Issues Releases Wiki Activity

feat: redirect using 308 for non-GET requests

Browse Source
This commit is contained in:
junderw 2021-08-19 07:29:39 +09:00 committed by Nicolas Duchon
parent 691724c81f
commit 1859811311
2 changed files with 13 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
docs/README.md
View File

@ -571,7 +571,7 @@ Complete list of policies available through the `SSL_POLICY` environment variabl
The default behavior for the proxy when port 80 and 443 are exposed is as follows: The default behavior for the proxy when port 80 and 443 are exposed is as follows:
- If a virtual host has a usable cert, port 80 will redirect to 443 for that virtual host so that HTTPS is always preferred when available. - If a virtual host has a usable cert, port 80 will redirect to 443 for that virtual host so that HTTPS is always preferred when available. This redirect will use a [301 code](https://developer.mozilla.org/en-US/docs/Web/HTTP/Status/301) for `GET` requests and [308 code](https://developer.mozilla.org/en-US/docs/Web/HTTP/Status/308) for any other HTTP method (`POST`/`HEAD`/`PUT` etc.).
- If the virtual host does not have a usable cert, but `default.crt` and `default.key` exist, those will be used as the virtual host's certificate. - If the virtual host does not have a usable cert, but `default.crt` and `default.key` exist, those will be used as the virtual host's certificate.
- If the virtual host does not have a usable cert, and `default.crt` and `default.key` do not exist, or if the virtual host is configured not to trust the default certificate, SSL handshake will be rejected (see [Default and Missing Certificate](#default-and-missing-certificate) below). - If the virtual host does not have a usable cert, and `default.crt` and `default.key` do not exist, or if the virtual host is configured not to trust the default certificate, SSL handshake will be rejected (see [Default and Missing Certificate](#default-and-missing-certificate) below).

14
nginx.tmpl
View File

@ -887,9 +887,19 @@ server {
location / { location / {
{{- if eq $globals.config.external_https_port "443" }} {{- if eq $globals.config.external_https_port "443" }}
return 301 https://$host$request_uri; if ($request_method = GET) {
return 301 https://$host$request_uri;
}
if ($request_method != GET) {
return 308 https://$host$request_uri;
}
{{- else }} {{- else }}
return 301 https://$host:{{ $globals.config.external_https_port }}$request_uri; if ($request_method = GET) {
return 301 https://$host:{{ $globals.config.external_https_port }}$request_uri;
}
if ($request_method != GET) {
return 308 https://$host:{{ $globals.config.external_https_port }}$request_uri;
}
{{- end }} {{- end }}
} }
} }