Top Menu

Jump to content
Home
    Modules
      • Projects
      • Activity
      • Work packages
      • Gantt charts
      • Calendars
      • Team planners
      • Boards
      • News
    • Getting started
    • Introduction video
      Welcome to OpenProject Community
      Get a quick overview of project management and team collaboration with OpenProject. You can restart this video from the help menu.

    • Help and support
    • Upgrade to Enterprise edition
    • User guides
    • Videos
    • Shortcuts
    • Community forum
    • Enterprise support

    • Additional resources
    • Data privacy and security policy
    • Digital accessibility (DE)
    • OpenProject website
    • Security alerts / Newsletter
    • OpenProject blog
    • Release notes
    • Report a bug
    • Development roadmap
    • Add and edit translations
    • API documentation
  • Sign in
      Forgot your password?

      or sign in with your existing account

      Google

Side Menu

  • Overview
  • Activity
    Activity
  • Roadmap
  • Work packages
    Work packages
  • Gantt charts
    Gantt charts
  • Calendars
    Calendars
  • Team planners
    Team planners
  • Boards
    Boards
  • News
  • Forums

Content

Support Installation & Updates
  1. OpenProject
  2. Forums
  3. Support Installation & Updates
  4. Avatar images broken behind proxy

Avatar images broken behind proxy

Added by Hayley IT over 6 years ago

Hi all,

We're brand new to OpenProject 8.2, having just installed it onto a CentOS7 VM and requested a free trial (still awaiting approval/key).

So, we've decided to put it behind a web proxy, which adds SSL. We've left OpenProject's Apache config alone, bar switching the port it listens on.

All seems fine, and the site it being served over SSL. However, something I have just noticed is that avatar images are now broken.

Is there a different/preferred way we should serve OP over SSL, or can anyone advise how to fix the broken avatar links (I have of course tried to simply re-upload the avatar images, but no luck).

Thank you.

Elliot


Replies (3)

RE: Avatar images broken behind proxy - Added by Hayley IT over 6 years ago

I think I have fixed the broken avatar images by setting the protocol to HTTPS under the System Settings >> General.

But, I have now also noticed that if I click on any admin section which redirects to an admin/*/upsale link, such as www.mydomain.com/admin/design/upsale, then it tries to connect to HTTP. Seems like HTTP is hard-coded for these links?

RE: Avatar images broken behind proxy - Added by Hayley IT over 6 years ago

Apparently, I can't even login to OP any more either, now that it's behind a secure proxy? Good stuff!

The login page just refreshes when credentials are submitted, and I get the following in the browser's developer console:

Refused to send form data to 'http://projects.my-domain.com/' because it violates the following Content Security Policy directive: "form-action 'self'".

RE: Avatar images broken behind proxy - Added by Hayley IT over 6 years ago

Found a random suggestion here: https://community.openproject.com/topics/7896

Adding RequestHeader set X-Forwarded-Proto "https"

to our separate reverse proxies' virtualhost config for OP appears to have saved the day!

  • (1 - 3/3)
Loading...