I have been meaning to get this blog SSL protected for a while and since solution like letsencrypt makes it easy I have generated some SSL keys for my domain and configured it in apache.
So far so good, but the thing is my VM at my hosting provider is pretty small and I have been using varnish for quite some time or I would get out of memory quickly some the kernel OOM killer kicking1 it.
Varnish don’t do SSL so you have to do something else, I went ahead and used Nginx to provide my SSL endpoint which then would look like this :
I could have done it with apache virtualhosts which look like this :
I went finally for nginx since most people seems to say that it was more lean and quick for those kick of ssl accelerator job.
So far so good for the configuration, you can find those informations all over the internet, the nginx ssl configuration was a bit special so I can have the higher secure end of SSL encryption :
Now the thing didn’t work very well when accessing the website, I could not see any of th medias including JS and SSL since they were served on the old non ssl url. I tried to force the wordpress configuration to serve SSL but I would end up in a http redirect loop.
Finally I stumbled on this guy blog and looked at a hack to put in the wp-config.php file. I streamlined it to :
if ( (!empty( $_SERVER['HTTP_X_FORWARDED_HOST'])) ||
(!empty( $_SERVER['HTTP_X_FORWARDED_FOR'])) ) {
$_SERVER['HTTPS'] = 'on';
}
and that’s it, wordpress would then understand it would serve as HTTPS and would add its https url properly.
Hope this helps
1 I had even a cron sometime ago to mysqlping my mysql server and restart it automatically if it was down since I was so sick of it