From 534afe606708ee5ffe09bd67ccdbf91b58a7e956 Mon Sep 17 00:00:00 2001
From: Jamie Curnow <jc@jc21.com>
Date: Wed, 28 Jan 2026 14:04:32 +1000
Subject: [PATCH] Implement suggestion from #5216 hopefully rectifying https ->
 forced https hosts

---
 docker/rootfs/etc/nginx/conf.d/include/force-ssl.conf | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/docker/rootfs/etc/nginx/conf.d/include/force-ssl.conf b/docker/rootfs/etc/nginx/conf.d/include/force-ssl.conf
index aa52f335..e43c2fc8 100644
--- a/docker/rootfs/etc/nginx/conf.d/include/force-ssl.conf
+++ b/docker/rootfs/etc/nginx/conf.d/include/force-ssl.conf
@@ -5,6 +5,9 @@ if ($scheme = "http") {
 if ($request_uri = /.well-known/acme-challenge/test-challenge) {
 	set $test "${test}T";
 }
+if ($http_x_forwarded_proto = "https") {
+	set $test "${test}S";
+}
 if ($test = H) {
 	return 301 https://$host$request_uri;
 }