Laravel generates wrong routes for TLS connections

[beyondcode]

Laravel generates wrong routes for TLS connections

[mpociot]

How did you setup expose and your nginx? Also how does your client connect to the server (which port)

[dakira]

EDIT: Updated with my full nginx config

Hey Marcel. Thanks for looking at this. The following nginx config runs on *.example.com:

nginx.conf

server {
    listen IP_ADDRESS:443 ssl http2;

    server_name _.example.com;
    server_name ~^.*\.example\.com$;

    ssl_certificate      /etc/letsencrypt/live/example.com/full.pem;
    ssl_certificate_key  /etc/letsencrypt/live/example.com/full.pem;

    client_max_body_size 128m;

    root "/var/www/vhosts/example.com";
    access_log "/var/log/www/example.com/access_ssl_log";
    error_log "/var/log/www/example.com/error_log";

    location / {
        proxy_pass         http://127.0.0.1:3250;
        proxy_set_header   Host $http_host;
        proxy_set_header   X-Real-IP $remote_addr;
        proxy_http_version 1.1;
        proxy_set_header   Upgrade $http_upgrade;
        proxy_set_header   Connection "upgrade";
        proxy_cache_bypass $http_upgrade;

        proxy_read_timeout     60;
        proxy_connect_timeout  60;
        proxy_redirect         off;
    }
}

*.example.com also has a proper wildcard letsencrypt certificate set up.

The expose config on the server looks like this:

Server: .expose/config.php

<?php

return [
    'host' => 'niess.space',
    'port' => 443,
    'auth_token' => '',
    'default_tld' => 'test',
    'max_logged_requests' => 25,
    'memory_limit' => '128M',
    'skip_body_log' => [
        'status' => [
            // "4*"
        ],
        'content_type' => [
            //
        ],
        'extension' => [
            '.js.map',
            '.css.map',
        ],
        'size' => '1MB',
    ],
    'admin' => [
        'database' => implode(DIRECTORY_SEPARATOR, [
            $_SERVER['HOME'] ?? __DIR__,
            '.expose',
            'expose.db',
        ]),
        'validate_auth_tokens' => true,
        'maximum_connection_length' => 0,
        'subdomain' => 'expose',
        'subdomain_generator' => \App\Server\SubdomainGenerator\RandomSubdomainGenerator::class,
        'users' => [
            'admin' => 'password',
        ],
        'user_repository' => \App\Server\UserRepository\DatabaseUserRepository::class,
        'messages' => [
            'message_of_the_day' => 'Thank you for using expose.',
            'invalid_auth_token' => 'Authentication failed. Please check your authentication token and try again.',
            'subdomain_taken' => 'The chosen subdomain :subdomain is already taken. Please choose a different subdomain.',
        ],
    ],
];

I run the server with expose serve example.com --port 3250

The client config looks like this:

Server: .expose/config.php

<?php

return [
    'host' => 'a.example.com',
    'port' => 443,
    'auth_token' => 'myauthtoken',
    'default_tld' => 'test',
    'max_logged_requests' => 25,
    'memory_limit' => '128M',
    'skip_body_log' => [
        'status' => [
            // "4*"
        ],
        'content_type' => [
            //
        ],
        'extension' => [
            '.js.map',
            '.css.map',
        ],
        'size' => '1MB',
    ],
    'admin' => [
        'database' => implode(DIRECTORY_SEPARATOR, [
            $_SERVER['HOME'] ?? __DIR__,
            '.expose',
            'expose.db',
        ]),
        'validate_auth_tokens' => false,
        'maximum_connection_length' => 0,
        'subdomain' => 'expose',
        'subdomain_generator' => \App\Server\SubdomainGenerator\RandomSubdomainGenerator::class,
        'users' => [
            'username' => 'password',
        ],
        'user_repository' => \App\Server\UserRepository\DatabaseUserRepository::class,
        'messages' => [
            'message_of_the_day' => 'Thank you for using expose.',
            'invalid_auth_token' => 'Authentication failed. Please check your authentication token and try again.',
            'subdomain_taken' => 'The chosen subdomain :subdomain is already taken. Please choose a different subdomain.',
        ],
    ],
];

Notice, that I use port 443 to connect to a.example.com because example.com is already in use on the server hosting a website. Kind of a hack, but it works. I can successfully expose my sites and see the result at https://{subdomain}.example.com (manually removing the "a"). I can also open https://expose.example.com to generate my login token. Shared sites are shown in the backend as http://{subdomain}.example.com:3250 (I think they should be shown as https://{subdomain}.example.com, though).

The only problem is that all links generated by the route helper point to http://{subdomain}.example.com:3250.

[mpociot]

hm that all looks good. And is pretty much my setup too. Could you show me the headers that you see in your dashboard when sharing a local url?

[dakira]

Here you go:
redacted

[mpociot]

I noticed that the nginx config is indeed different than mine:

proxy_set_header X-Forwarded-For    $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto  https;

Could you try adding those headers?

[dakira]

Perfect, that works. I'll PR the docs.

[mpociot]

Awesome, thanks!