Use nginx as a reverse proxy

I’m reluctant to include nginx as a dependency, but twisted is simply not powerful enough. It can’t set the X-Forwaded-Host header, so when Flask redirects to a different URL, it doesn’t know the host or protocol which the client used to initiate the request.

I’ll try to not make it a mandatory dependency, such that everything runs without. However, SSL likely won’t work. This must be why everyone discourages the use of SSL with Flask directly. Not a production server, and so on…

[AdrianVollmer]

Yeah so the stackexchange post was about proxies, not reverse proxies. It was much easier to add headers in a reverse proxy.

Also, what a disgrace it is to only have SSLv3 and TLS1.0 available by default in 2019… on a client:

PS C:\Users\avollmer> [Net.ServicePointManager]::SecurityProtocol
Ssl3, Tls
PS C:\Users\avollmer> [Net.ServicePointManager]::SecurityProtocol = `
>>     [Net.SecurityProtocolType]::Tls12,
>>     [Net.SecurityProtocolType]::Tls11 ;
PS C:\Users\avollmer> [Net.ServicePointManager]::SecurityProtocol
Tls11, Tls12
PS C:\Users\avollmer> get-date

Samstag, 15. Juni 2019 08:27:17

[AdrianVollmer]

I did it so at least the webapp is usable again. I’ll leave this open until we have a decision