production mode with a reverse proxy using unexpected redirect

[whiteout-io]

production mode with a reverse proxy using unexpected redirect

[felixhammerl]

https:// should work. It appears that you tried to access the app without TLS, which we don't allow in production mode, see here: https://github.com/whiteout-io/mail-html5/blob/master/server.js#L94-L100

Can you confirm this?

[lazzarello]

I have a proxy in front of the node.js app that is serving up https. Are you saying that the node.js app must run an HTTPS server? If so where do I configure the RSA key and x.509 certificate?

[tanx]

Here is the code for the webserver config:

https://github.com/whiteout-io/mail-html5/blob/master/server.js#L70

The server is currently optimized for Deployment on Elastic Beanstalk on AWS. Specifically if the HTTP header X-Forwarded-Proto !== 'https' then the app will redirect requests to https://url. This is required because TLS is terminated at the Loadbalancer and traffic between the LB and the node.js host is over http.

I would suggest playing around with settings to find a configuration that suits your setup.

[lazzarello]

Got it, thanks. I usually do this kind of redirection in the proxy server.

[tanx]

I usually do this kind of redirection in the proxy server.

Agreed. This is an infrastructure detail. The problem is that Elastic Beanstalk is a PaaS stack, so it was the most straightforward solution to add the http header in the express server.

If you want to change the current solution to be more flexible, we'd be happy to accept a PR that moves the stuff you don't need for your setup to a config file. This way you could integrate upstream patches easier into your deployment.

https://github.com/whiteout-io/mail-html5/tree/master/config