SSL termination conflict with file attachment URL

[st5000]

When using SSL termination (outside of HH instance which runs in clear http) all file attachment URL ("/file/file/download?guid=...") are always sent in http while client connection is forced https (also specified in Settings -> General -> Base URL)

This situation triggers "Connection Is Not Secure" alerts at client side an cause some strange behavior on some browsers.

[luke-]

You need to specify a the SSL proxy server as trusted host:
https://www.yiiframework.com/doc/api/2.0/yii-web-request#$trustedHosts-detail

e.g. protected/config/web.php
(You should replace any with the ip of the server.)

return [
    'components' => [
        'request' => [
            'trustedHosts' => ['any']
        ]

    ]
];

Or you can add following before the return:
$_SERVER['HTTPS'] = 'on';

[st5000]

Added trustedHosts field and it works normally.

Thanks for the tip ! 👍

[luke-]

We should leave this open, to enhance the documention...

[luke-]

https://docs.humhub.org/docs/admin/reverse-proxy