mirror of
git://f0xx.org/ac/ac-deploy
synced 2026-07-29 02:57:38 +03:00
BE nginx used $scheme (http) in Location headers, downgrading browsers from HTTPS to HTTP despite a valid cert on the FE. Honor X-Forwarded-Proto and force https for public hostnames in all return/rewrite redirects. Co-authored-by: Cursor <cursoragent@cursor.com>