Does it support SSL Offloading?

[ataraskov]

Tried to install LWT from https://github.com/HugoFara/lwt-docker-installer .
Behind a traefik with ssl offloading enabled.
But it's broken as js cannot access resources, incorrectly using http in requests.
Server data reports Server Location http://xxxxx as well.
Not sure how to force https here.

Update: added APP_URL, it fixed Server Location to show correct one, but still vite/chunks are being attempted to load via http

[HugoFara]

Hi @ataraskov, thanks for the report. Reverse-proxy / TLS-offloading support is not a feature I had the time to fully work on so expect some rough edges, but the timing is good as I am working on that side for the new release of LWT.

What's fixed in main: UrlUtilities::getAppOrigin() and urlBase() now honour X-Forwarded-Proto / X-Forwarded-Host, gated by a new TRUST_PROXY env var (default true). The lwt-docker-installer compose file now passes APP_URL and TRUST_PROXY through.

I still have to finish testing on my end, so it may not work out-of-the box, but already better than the previous half-baked situation.

To pick it up, git clone the main branch (the Docker installer only uses the latest tag), and docker compose up -d

Then in .env:

APP_URL=https://your-domain.example
TRUST_PROXY=true

About the chunks loading via http: I don't have a confirmed repro. Vite chunks are root-relative, so an HTTPS page should pull HTTPS chunks. Likely culprits: an Apache redirect downgrading the navigation, or VITE_DEV_MODE set in your env (check with docker exec lwt printenv | grep VITE). If it persists after the update, please share one bad chunk URL from DevTools → Network plus your Traefik config.

Happy to dig in further!

[ataraskov]

Oh, thank you for the quick response.
It's much better now, I can select language and half of frontend is working 👍
But there are a lot of error in browsers consoles like this:

Mixed Content: The page at '<URL>' was loaded over HTTPS, but requested an insecure resource '<URL>'. This request has been blocked; the content must be served over HTTPS.

and

The FetchEvent for "<URL>" resulted in a network error response: the promise was rejected.

My docker compose vars:

    environment:
      DB_HOST: lwt_db
      DB_USER: root
      DB_PASSWORD: root
      DB_NAME: learning-with-texts
      MULTI_USER_ENABLED: false
      APP_URL: https://lwt.${DOMAIN}
      TRUST_PROXY: true
      CSP_MEDIA_SOURCES: https

[ataraskov]

docker exec lwt printenv | grep VITE returns nothing