Redirect Scheme middleware not redirecting page from http to https

starcraft66 · April 24, 2020, 11:19pm

I configured my routers to have a chain middleware that consists of a redirectscheme middleware and a headers middleware (that contains a strict-transport-security header).

Upon visiting an http page, I am not automatically redirected to the https version as I should be.

Here are the links to my relevant traefik configs:

github.com

starcraft66/infrastructure/blob/master/roles/tdude.traefik/templates/docker-compose.yml.j2

version: '2.3'
services:
  traefik:
    image: traefik:{{ traefik_docker_version }}
    container_name: traefik
    restart: unless-stopped
    volumes:
      - "/var/run/docker.sock:/var/run/docker.sock"
      - "{{ traefik_data_folder }}/traefik.toml:/etc/traefik/traefik.toml"
      - "{{ traefik_data_folder }}/http.toml:/etc/traefik/http.toml"
      - "{{ traefik_data_folder }}/acme.json:/etc/traefik/acme.json"
    ports:
      - "158.69.118.62:80:80"
      - "158.69.118.62:443:443"
      # 2607:5300:60:873e::3 is still required until I figure out a fix for the gitlab ssh port
      - "2607:5300:60:873e::3:80:80"
      - "2607:5300:60:873e::3:443:443"

    labels:
      - "traefik.enable=true"

This file has been truncated. show original

github.com

starcraft66/infrastructure/blob/master/roles/tdude.traefik/templates/http.toml.j2

[http.middlewares]
  [http.middlewares.https.chain]
      middlewares = ["https-redirect", "sts-headers"]
  [http.middlewares.https-redirect.redirectScheme]
    scheme = "https"
    port = "443"
    permanent = true
  [http.middlewares.sts-headers.headers]
    stsincludesubdomains = true
    stspreload = true
    stsseconds = 315360000
    forcestsheader = true
  [http.middlewares.fwauth.forwardAuth]
    address = "http://traefik-forward-auth:4181"
    authResponseHeaders = ["X-Forwarded-User"]

github.com

starcraft66/infrastructure/blob/master/roles/tdude.traefik/templates/traefik.toml.j2

[entryPoints]
  [entryPoints.web]
    address = ":80"

  [entryPoints.web-secure]
    address = ":443"

  [entryPoints.metrics]
    address = ":8082"
    
  [entryPoints.plex]
    address = ":32400"

[certificatesResolvers.le.acme]
  email = "starcraft66@gmail.com"
  keyType = "RSA4096"
  storage = "/etc/traefik/acme.json"
{% if development is defined and development == true %}
  caServer = "https://acme-staging-v02.api.letsencrypt.org/directory"
{% endif %}

This file has been truncated. show original

docker-compose with configuration labels for an example service:

github.com

starcraft66/infrastructure/blob/master/roles/tdude.matrix/templates/docker-compose.yml.j2

version: '2.3'
services:
  synapse:
    container_name: matrix_synapse
    image: matrixdotorg/synapse:{{ matrix_synapse_version }}
    volumes:
      - {{ matrix_synapse_data_folder }}:/data
    environment:
      UID: 927
      GID: 927
      TZ: "Europe/Paris"
      SYNAPSE_CACHE_FACTOR: 10.0
      SYNAPSE_CONFIG_PATH: "/data/homeserver.yaml"
    networks:
      monitoring:
      matrix:
        ipv4_address: "10.72.128.4"
        ipv6_address: "2607:5300:60:873e:7::4"
    restart: unless-stopped
    logging:

This file has been truncated. show original

Output of curl on http and https pages:

root@sapling:/opt/traefik# curl -I http://nerdsin.space
HTTP/1.1 404 Not Found
Content-Type: text/plain; charset=utf-8
X-Content-Type-Options: nosniff
Date: Fri, 07 Feb 2020 04:53:04 GMT
Content-Length: 19

root@sapling:/opt/traefik# curl -I https://nerdsin.space
HTTP/2 200
accept-ranges: bytes
content-type: text/html
date: Fri, 07 Feb 2020 04:53:09 GMT
etag: "5e2ed12f-1123"
last-modified: Mon, 27 Jan 2020 12:01:51 GMT
server: nginx
strict-transport-security: max-age=315360000; includeSubDomains; preload
content-length: 4387

Screenshot of dashboard:

Topic		Replies	Views
Middleware redirectScheme seemingly ignored Traefik v2 (latest) docker	2	1307	January 12, 2020
Redirect scheme (http to https) not working Traefik v2 (latest) middleware	6	3941	October 10, 2022
Http to https redirection through middlewares does not work unless globally enforced Traefik v2 (latest) docker , kubernetes-ingress , middleware	13	6131	July 24, 2023
Can't get auto-redirect working on 2.2.1 Traefik v2 (latest) middleware	4	426	June 14, 2020
How to force redirect to https Traefik v2 (latest) docker , middleware	6	5124	January 3, 2020

Redirect Scheme middleware not redirecting page from http to https

Related Topics