WebIDE Mixed Content on Docker with reverse Proxy
Summary
WebIDE loads content via HTTP when gitlab is accessed via HTTPS. I've already had a similar Issue (gitlab-foss#61280 (closed)) I'm using GitLab with docker and a reverse proxy for HTTPS
It seems that also HTTPS is missing in the URL for cloning projects.
Steps to reproduce
Install gitlab with docker, use the jwilder/nginx-proxy and jrcs/letsencrypt-nginx-proxy-companion for HTTPS reverse proxy and open WebIDE in any Project
What is the current bug behavior?
WebIDE won't load properly
Relevant logs and/or screenshots
Error Message in Chrome:
xhr.js:172 Mixed Content: The page at 'https://git.company.at/-/ide/project/my-research/data-model/edit/master/-/' was loaded over HTTPS, but requested an insecure XMLHttpRequest endpoint 'http://git.company.at/my-research/data-model/files/master?format=json'. This request has been blocked; the content must be served over HTTPS.
Results of GitLab environment info
Expand for output related to GitLab environment info
root@git:/# gitlab-rake gitlab:env:info
System information System: Current User: git Using RVM: no Ruby Version: 2.6.3p62 Gem Version: 2.7.9 Bundler Version:1.17.3 Rake Version: 12.3.2 Redis Version: 3.2.12 Git Version: 2.22.0 Sidekiq Version:5.2.7 Go Version: unknown
GitLab information Version: 12.3.3 Revision: ab531f31825 Directory: /opt/gitlab/embedded/service/gitlab-rails DB Adapter: PostgreSQL DB Version: 10.9 URL: http://git.kara-software.at HTTP Clone URL: http://git.kara-software.at/some-group/some-project.git SSH Clone URL: git@git.kara-software.at:some-group/some-project.git Using LDAP: no Using Omniauth: yes Omniauth Providers:
GitLab Shell Version: 10.0.0 Repository storage paths: default: /var/opt/gitlab/git-data/repositories GitLab Shell path: /opt/gitlab/embedded/service/gitlab-shell Git: /opt/gitlab/embedded/bin/git
Results of GitLab application Check
Expand for output related to the GitLab application check
root@git:/# gitlab-rake gitlab:check SANITIZE=true Checking GitLab subtasks ...
Checking GitLab Shell ...
GitLab Shell: ... GitLab Shell version >= 10.0.0 ? ... OK (10.0.0) Running /opt/gitlab/embedded/service/gitlab-shell/bin/check Check GitLab API access: OK Redis available via internal API: OK
gitlab-shell self-check successful
Checking GitLab Shell ... Finished
Checking Gitaly ...
Gitaly: ... default ... OK
Checking Gitaly ... Finished
Checking Sidekiq ...
Sidekiq: ... Running? ... yes Number of Sidekiq processes ... 1
Checking Sidekiq ... Finished
Checking Incoming Email ...
Incoming Email: ... Reply by email is disabled in config/gitlab.yml
Checking Incoming Email ... Finished
Checking LDAP ...LDAP: ... LDAP is disabled in config/gitlab.yml
Checking LDAP ... Finished
Checking GitLab App ...
Git configured correctly? ... yes Database config exists? ... yes All migrations up? ... yes Database contains orphaned GroupMembers? ... no GitLab config exists? ... yes GitLab config up to date? ... yes Log directory writable? ... yes Tmp directory writable? ... yes Uploads directory exists? ... yes Uploads directory has correct permissions? ... yes Uploads directory tmp has correct permissions? ... yes Init script exists? ... skipped (omnibus-gitlab has no init script) Init script up-to-date? ... skipped (omnibus-gitlab has no init script) Projects have namespace: ... 5/1 ... yes 3/2 ... yes 5/3 ... yes 3/4 ... yes 3/5 ... yes 3/7 ... yes 3/8 ... yes 5/9 ... yes 3/10 ... yes 5/13 ... yes 2/14 ... yes 5/15 ... yes 5/16 ... yes 3/18 ... yes 5/19 ... yes 3/20 ... yes 11/21 ... yes 3/22 ... yes 5/23 ... yes 21/24 ... yes 3/25 ... yes 3/26 ... yes 5/27 ... yes 5/28 ... yes 5/29 ... yes 2/30 ... yes 3/32 ... yes 5/33 ... yes 22/34 ... yes 22/35 ... yes 24/36 ... yes 24/37 ... yes 24/38 ... yes 5/39 ... yes 24/40 ... yes 24/41 ... yes 22/42 ... yes 5/43 ... yes Redis version >= 2.8.0? ... yes Ruby version >= 2.5.3 ? ... yes (2.6.3) Git version >= 2.22.0 ? ... yes (2.22.0) Git user has default SSH configuration? ... yes Active users: ... 17 Is authorized keys file accessible? ... yes
Checking GitLab App ... Finished
Checking GitLab subtasks ... Finished
Possible fixes
I think there was a bugfix implemented for my other problem, that could be applied here. This fix just changed the protocol part of the URL to https