From 24ea511ad136e8dd9742326feb334d3fa5535e9f Mon Sep 17 00:00:00 2001 From: Aaron Dalton Date: Fri, 23 Sep 2016 14:36:40 -0600 Subject: [PATCH] Added documented options to .htaccess to support detecting forwarded HTTPS (#1063) support. --- .htaccess | 10 ++++++++++ 1 file changed, 10 insertions(+) diff --git a/.htaccess b/.htaccess index d41f08f3e..59a15ded8 100644 --- a/.htaccess +++ b/.htaccess @@ -13,6 +13,16 @@ RewriteEngine On ## End - RewriteBase +## Begin - X-Forwarded-Proto +# In some hosted or load balanced environments, SSL negotiation happens upstream. +# In order for Grav to recognize the connection as secure, you need to uncomment +# the following lines. +# +# RewriteCond %{HTTP:X-Forwarded-Proto} https +# RewriteRule .* - [E=HTTPS:on] +# +## End - X-Forwarded-Proto + ## Begin - Exploits # If you experience problems on your site block out the operations listed below # This attempts to block the most common type of exploit `attempts` to Grav