How to deploy an HTTPS-only site, with Django/nginx?

by

For the 2nd part of John C’s answer, and Django 1.4+…

Instead of extending HttpResponseRedirect, you can change the request.scheme to https.
Because Django is behind Nginx’s reverse proxy, it doesn’t know the original request was secure.

In your Django settings, set the SECURE_PROXY_SSL_HEADER setting: 

SECURE_PROXY_SSL_HEADER = ('HTTP_X_FORWARDED_PROTO', 'https')

Then, you need Nginx to set the custom header in the reverse proxy. In the Nginx site settings:

location / {
    # ... 
    proxy_set_header X-Forwarded-Proto $scheme;
}

This way request.scheme == 'https' and request.is_secure() returns True.
request.build_absolute_uri() returns https://... and so on…

More Related Contents:

  1. Extending the User model with custom fields in Django
  2. (13: Permission denied) while connecting to upstream:[nginx]
  3. How to use permission_required decorators on django class-based views
  4. How can I test https connections with Django as easily as I can non-https connections using ‘runserver’?
  5. Django: Populate user ID when saving a model
  6. Can django’s auth_user.username be varchar(75)? How could that be done?
  7. How can I detect multiple logins into a Django web application from different locations?
  8. Putting a django login form on every page
  9. Check permission inside a template in Django
  10. Where can I find the error logs of nginx, using FastCGI and Django?
  11. Django’s self.client.login(…) does not work in unit tests
  12. Using Django auth UserAdmin for a custom user model
  13. How to force a user logout in Django?
  14. Get user information in django templates
  15. Error “You’re accessing the development server over HTTPS, but it only supports HTTP”
  16. UnicodeEncodeError: ‘ascii’ codec can’t encode character
  17. Nginx connection reset, response from uWsgi lost
  18. Host Django on subfolder
  19. 110: Connection timed out (Nginx/Gunicorn)
  20. django : Serving static files through nginx
  21. Django Cookies, how can I set them?
  22. Custom QuerySet and Manager without breaking DRY?
  23. Django: Query using contains each value in a list
  24. Changing Django settings at runtime
  25. How to make email field unique in model User from contrib.auth in Django
  26. Workflow frameworks for Django [closed]
  27. ImportError: Couldn’t import Django
  28. How to do a multi-step form in Django?
  29. Django / Comet (Push): Least of all evils?
  30. CSRF verification failed. Request aborted. on django

Leave a Comment