Thanks for this, just saved me a hard reset!
On Saturday, November 15, 2014 at 2:48:23 AM UTC-5, Josh B wrote:
>
> Finally tracked down the solution. The request.is_secure(); isn't looking
> for the HTTP_X_FORWARDED_PROTOCOL to test for HTTPS so its always
> returning that its not secure. To fix it I had to add the below to my
> settings.py file.
>
> SECURE_PROXY_SSL_HEADER = ('HTTP_X_FORWARDED_PROTOCOL', 'https')
> Also I see that line in the deploy local_settings.py.template file.
>
> On Friday, November 14, 2014 9:08:57 AM UTC-7, Josh B wrote:
>>
>> Thanks, Josh.
>>
>> I have tried with that set or left blank and I get the same thing. I have
>> also removed the SSL config parameters and just use default ones and I
>> still get the redirect. Looking through all of the Cartridge sites I have
>> built this is the issue that has always alluded me.
>>
>> On Friday, November 14, 2014 8:22:13 AM UTC-7, Josh Cartmell wrote:
>>>
>>> I've had issues with redirects and SSL before if I put in the wrong
>>> "Force host" which is a backend editable setting.
>>>
>>> On Fri, Nov 14, 2014 at 3:19 AM, Josh B <[email protected]>
>>> wrote:
>>>
>>>> I must be missing something, but the last few Nginx + Cartridge sites I
>>>> have launched I have to https the whole the site. If I don't the sections
>>>> I
>>>> need SSL on just do a 302 redirect loop.
>>>>
>>>> Here are my settings:
>>>>
>>>> SSL_ENABLED = True
>>>> SSL_FORCE_URL_PREFIXES = ('/shop/cart','/shop/checkout','/account',
>>>> '/admin')
>>>> SSL_FORCED_PREFIXES_ONLY = True
>>>>
>>>> I also enabled the SSL middleware.
>>>>
>>>> My Nginx config matches the one provided.
>>>>
>>>> Thoughts?
>>>>
>>>> --
>>>> You received this message because you are subscribed to the Google
>>>> Groups "Mezzanine Users" group.
>>>> To unsubscribe from this group and stop receiving emails from it, send
>>>> an email to [email protected].
>>>> For more options, visit https://groups.google.com/d/optout.
>>>>
>>>
>>>
--
You received this message because you are subscribed to the Google Groups
"Mezzanine Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
For more options, visit https://groups.google.com/d/optout.
