HTTPS and Theme

Site Operators
1

Hello,

I have https working for both the studio and lms sites on juniper. However, I have noticed that I am getting content being served as http:// for example the organization logo.

The generated code is:

<div class="wrapper-logo">
     <p>
       <a href="/">
         <img alt="organization logo" src="http://online.server.org/static/new-theme/images/logo.90b48884ee5a.png">
       </a>
     </p>
</div>

Where in the template the footer.html includes the following

   <div class="wrapper-logo">
     <p>
       <a href="/">
         ## The default logo is a placeholder.
         ## You can either replace this link entirely or update
         ## the FOOTER_ORGANIZATION_IMAGE in Django settings.
         ## If you customize FOOTER_ORGANIZATION_IMAGE, then the image
         ## can be included in the footer on other sites
         ## (e.g. a blog or marketing front-end) to provide a consistent
         ## user experience.  See the branding app for details.
         <img alt="organization logo" src="${footer['logo_image']}">
       </a>
     </p>
   </div>

So not sure if there is a configuration flag I can set in lms.env.json/lms.yml files to say this site is HTTPS so when ${footer[‘logo_image’]} is compiled it is run with http instead of https.

Thank you!

2

Just putting these here. I had to enable the following:

I set these values and it works now with any mixed content errors.

NGINX_REDIRECT_TO_HTTPS: True
NGINX_HTTPS_REDIRECT_STRATEGY: "scheme"
NGINX_SET_X_FORWARDED_HEADERS: True

Once I did this, the urls were generated with https.

Tom

3

How did you make https works for studio? I need to do that but don’t know how.

I’ll appreciate some guidance if you can.

Thanks in advance,

4

Below is some of the variables I have in server-vars.yml that I believe influence getting HTTPS working with nginx.

EDXAPP_LMS_BASE: "dev.online.example.org"
EDXAPP_CMS_BASE: "dev-studio.online.example.org"
EDXAPP_PREVIEW_LMS_BASE: "dev-preview.online.example.org"
CMS_HOSTNAME: '~^((stage|prod|dev)-)?studio.*'
EDXAPP_SESSION_COOKIE_DOMAIN: ".{{ EDXAPP_LMS_BASE }}"
EDXAPP_CROSS_DOMAIN_CSRF_COOKIE_NAME: "csrf-cookie-{{ EDXAPP_LMS_BASE }}"
EDXAPP_CROSS_DOMAIN_CSRF_COOKIE_DOMAIN: ".{{ EDXAPP_LMS_BASE }}"
EDXAPP_LOGIN_REDIRECT_WHITELIST:
  - "{{ EDXAPP_CMS_BASE }}"
EDXAPP_SESSION_COOKIE_SECURE: true
EDXAPP_CSRF_COOKIE_SECURE: true
# NGINX settings:
NGINX_ENABLE_SSL: True
NGINX_REDIRECT_TO_HTTPS: True
# This variable is only checked if NGINX_REDIRECT_TO_HTTPS is true
# It should be set to one of !!null, "scheme" or "forward_for_proto"
NGINX_HTTPS_REDIRECT_STRATEGY: "scheme"
NGINX_SET_X_FORWARDED_HEADERS: True

NGINX_SSL_CERTIFICATE: "/klib/conf/ssl/online.example.org-fullchain.crt"
NGINX_SSL_KEY: "/klib/conf/ssl/online.example.org.pem"
EDXAPP_LMS_SSL_NGINX_PORT: 443
EDXAPP_CMS_SSL_NGINX_PORT: 443
EDXAPP_LMS_NGINX_PORT: 80
EDXAPP_CMS_NGINX_PORT: 80