HTTPS redirection depending on path

[styris-ame]

Consider the following working configuration:

listen_port = 80
listen_port_tls = 443

[apps.wngman]
server_name = 'wngman.styris.net'
tls = { https_redirection = true, tls_cert_path = 'server.crt',  ...

[[apps.wngman.reverse_proxy]]
upstream = [
  { location = '192.168.1.100:8787' }
]

[[apps.wngman.reverse_proxy]]
path = '/api'
upstream = [
  { location = '192.168.1.100:8001' }
]

[[apps.wngman.reverse_proxy]]
path = '/.well-known'
upstream = [
  { location = '127.0.0.1:8080' }
]

Notice how https_redirection applies to all reverse_proxy targets. However, I only want https_redirection to be enforced for my first two targets, but not my path = './well-known' target.

Is there any way I can disable redirection for that target only?

[junkurihara]

Hi! @styris-ame

Honestly, I didn't consider this kind of edge case. Currently, https_redirection works at the app level (per server_name), not per individual reverse_proxy target. In your case, a possible work around is to disable https_redirection for hosting .well-known with plaintext http.

I think it might be better to implement a new upstream option like disable_https_redirection in future.

[styris-ame]

Thanks! Would love to see a disable_https_redirection upstream option.

[ngocnha]

I need this option too, it's essential.
And I also need multiple domains for one app and multiple paths for one upstream.