Skip to content
Discussion options

You must be logged in to vote

InvalidAuthenticityToken (HTTP Origin header (https://dawarich.domain.tld) didn't match request.base_url (http://dawarich.domain.tld)):
Notice https vs. http

My guess would be that your reverse proxy does not set the X-Forwarded headers correctly (X-Forwarded-Host, X-Forwarded-Port, X-Forwarded-Proto)

Also seems like APPLICATION_HOST is still in use in the program code

config.action_mailer.default_url_options = { host: ENV.fetch('APPLICATION_HOST', 'localhost'), port: 3000 }

so maybe also try setting APPLICATION_HOST to your domain and APPLICATION_PROTOCOL to http

Replies: 4 comments 6 replies

Comment options

You must be logged in to vote
3 replies
@xep22
Comment options

@Freika
Comment options

@xep22
Comment options

Comment options

You must be logged in to vote
0 replies
Comment options

You must be logged in to vote
1 reply
@xep22
Comment options

Comment options

You must be logged in to vote
2 replies
@xep22
Comment options

@nicolasshu
Comment options

Answer selected by Freika
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Category
Q&A
Labels
None yet
4 participants