From 0de216315ed78a2e02f93e92ef94a966fb876315 Mon Sep 17 00:00:00 2001
From: Jennie Robinson Faber <jennie@jenniefaber.com>
Date: Mon, 2 Mar 2026 11:22:57 +0000
Subject: [PATCH] Hardcode X-Forwarded-Proto to https (always behind Traefik)

---
 nginx.conf | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/nginx.conf b/nginx.conf
index e61b649..942df99 100644
--- a/nginx.conf
+++ b/nginx.conf
@@ -60,7 +60,7 @@ http {
             proxy_set_header Host $host;
             proxy_set_header X-Real-IP $remote_addr;
             proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
-            proxy_set_header X-Forwarded-Proto $scheme;
+            proxy_set_header X-Forwarded-Proto https;
             proxy_set_header Accept-Encoding "";
 
             proxy_http_version 1.1;
@@ -85,7 +85,7 @@ http {
             proxy_set_header Host $host;
             proxy_set_header X-Real-IP $remote_addr;
             proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
-            proxy_set_header X-Forwarded-Proto $scheme;
+            proxy_set_header X-Forwarded-Proto https;
 
             # Disable encoding so sub_filter can process the response
             proxy_set_header Accept-Encoding "";