How to make NGINX redirect from http to https?

Question

I want to redirect from http to https in an NGINX server block.

Following an answer in a related post I tried adding another server block in the following NGINX config file, but got a 'conflicting server name' warning, as (presumably) the value of server_name doesn't include the protocol prefix:

server {
    listen 80;
    listen 443 ssl;
    ssl_certificate /etc/nginx/ssl/server.crt;
    ssl_certificate_key /etc/nginx/ssl/server.key;
    server_name sub.domain.co.uk;
    return 302 https://sub.domain.co.uk$request_uri;
}

server {
    listen 443 ssl;
    ssl_certificate /etc/nginx/ssl/server.crt;
    ssl_certificate_key /etc/nginx/ssl/server.key;
    server_name sub.domain.co.uk;
    location / {
        root /home/saves/webapps/html/;
        index index.html;
    }
    location /api/ {
        [...]
   }
}

score 3 · Accepted Answer · answered Oct 20 '14 at 14:28

The problem is that you have configured two server blocks listening for SSL on the same port with the same server name and there's no way for nginx to decide which one to choose in these conditions. Change it to :

server {
    listen 80 default_server;
    listen 443 ssl default_server;
    server_name _;
    ssl_certificate /etc/nginx/ssl/server.crt;
    ssl_certificate_key /etc/nginx/ssl/server.key;
    return 302 https://sub.domain.co.uk$request_uri;
}

server {
    listen 443;
    server_name sub.domain.co.uk;

    location / {
        root /home/saves/webapps/html/;
        index index.html;
    }
    location /api/ {
        [...]
   }
}

thanks Xavier - see my solution below (which works) and let me know if there's anything better. — Dave Everitt, Oct 20 '14 at 14:34

score 0 · Answer 2 · edited Apr 13 '17 at 12:14

0

I thought about this, did a little research, and solved it with a much simpler server block before the main one, from this answer:

server {
    listen 80;                            
    location / {
        return 301 https://sub.domain.co.uk;
    }
}

But finally amended it after the comments to this:

server {
    listen 443 ssl;
    ssl_certificate /etc/nginx/ssl/server.crt;
    ssl_certificate_key /etc/nginx/ssl/server.key;
    server_name sub.domain.co.uk;
    location / {
        return 301 https://sub.domain.co.uk;
        root /home/saves/webapps/html/;
        index index.html;
    }
    [...]
}

So thanks to you both for your swift and useful replies.

edited Apr 13 '17 at 12:14

Community

1

answered Oct 20 '14 at 14:33

Dave Everitt

201
1
4
11

2

It won't work for SSL connections not matching your domain name : you need a default vhost to redirect these to your actual domain. – Xavier Lucas Oct 20 '14 at 14:34
Note that the location block isn't strictly required here. – gparent Oct 20 '14 at 14:40
Yes, I just found that out. I need to regenerate the SSL certificate for the new domain name and change my config file. – Dave Everitt Oct 20 '14 at 14:42
@gparent - then where do I place the `return` statement - can it go in the main (second) block if I add `listen 80` at the top? – Dave Everitt Oct 20 '14 at 14:45
1

Yes, the return statement can be part of the main block for this kind of global redirect. – gparent Oct 20 '14 at 14:49
I just added my new server block with the redirect placed in the existing `location` value - it works, thanks. – Dave Everitt Oct 20 '14 at 15:01

How to make NGINX redirect from http to https?

2 Answers2

Linked