force_ssl_login produces redirect chain

[anonymous-matomo-user]

I am running piwik on nginx with php-fpm and I have configured a vhost for port 80 and one for 443. Both work just fine and I am able to login and use piwik via https.

However if I enable "force_ssl_login" Safari throws a "Too many redirects" error.

When using curl -k -v https://my-host.com/ I'm getting another
HTTP/1.1 302 Moved Temporarily
Location: https://my-host.com/

Is there maybe a header that is missing like X-FORWARDED-PROTO?
Keywords: ssl

[anonymous-matomo-user]

Hmm, forget the last line - that header should only be relevant in proxy setups

[robocoder]

Your nginx configuration doesn't appear to set the HTTPS environment variable (which PHP looks for in $_SERVER['HTTPS']). Add this to your nginx config:

fastcgi_param HTTPS on;

[anonymous-matomo-user]

Thank you! That helped!

[mattab]

how do I force Piwik to use SSL for more security?