Web Hosting HTTPS

Web Hosting HTTPS

BlueMapWebChat 4.7.0 · Minecraft 1.18–26.2 · Java 17 baseline

6. HTTP, HTTPS, and Public URLs

6.1 Direct HTTP

Recommended only for testing or a private network.

http:
  host: "0.0.0.0"
  port: 8899
  path-prefix: "/api"
  cors-origin: "*"

web-addon:
  api-base-url: ""

6.2 Same-Domain HTTPS Reverse Proxy

http:
  host: "127.0.0.1"
  port: 8899
  path-prefix: "/api"
  cors-origin: "https://map.example.com"
  trusted-proxies:
    - "127.0.0.1"
    - "::1"

web-addon:
  api-base-url: "/bmwc/api"

standalone-web:
  enabled: true
  api-base-url: ""

Public paths:

https://map.example.com/          BlueMap
https://map.example.com/bmwc/api  BlueMapWebChat API
https://map.example.com/bmwc/chat Standalone chat

Normally leave standalone-web.api-base-url, upload.public-base-url, and emoji.public-base-url empty. They then follow the active public API base automatically.

6.3 Trusted Proxy Handling

X-Forwarded-For is accepted only from direct peers listed in http.trusted-proxies. Keep the list empty for direct HTTP.

Temporary diagnostic option:

http:
  log-client-ip-resolution: true

Disable it after confirming the proxy and resolved client IP.

Detailed references

See the bundled docs/CADDY_HTTPS_EN.md and docs/NGINX_HTTPS_EN.md for complete reverse-proxy examples.