Automatic HTTP -> HTTPS redirection

He guys,

i cant find it on the web-if so it migth be missing-

it would be nice to have an http -> https redirection for the web-if, i case of some forgetting the https default…like me sometimes…

@g6094199 Hello again. It might be a good idea but the http port (80) was intentionally freed up recently to allow other services to use it. We used to have it auto redirect to the https port (443 ) but it seemed like we were missing a tick by having both key ports taken by the Rockstor UI when many will have the Rockstor UI as a secondary need and a Rock-on as a primary need which the now free http port 80 could serve. Given the Rockstor interface is essentially ‘all powerful’ it’s best default was https rather than http.

Maybe an http -> https redirect could be presented as a configuration option but given there could be Rock-ons using this port it is a little on the non trivial side and could lead to easy breakage. This is one of the problems of multi hosting, ie many services on the same ip.

1 Like

making it an option should be sufficient imho. so it would be gerats someone would create a tick in the web-if and make it unset at default.

using 80 is always a risk nowadays so there will always be a problem using tls connections to e.g. owncloud. you always have to figure out which port you can use safely for https for 3rd party apps/rockons or whatever u will call it.

This isn’t as good as a built-in option, but I was also annoyed by this, so I just went and created a rockon to do it: https://github.com/rockstor/rockon-registry/pull/77

If you want to try it out before that PR gets merged, just grab the .json file and follow the instructions at https://github.com/rockstor/rockon-registry#how-can-i-add-my-own-app to install it.

Uses https://hub.docker.com/r/hope/redirect-http-to-https/ under the hood, which seems to work well enough for my needs.

1 Like

@phillxnet Sorry to necro this thread but it seems like the better solution would be for the rockon to be able to use a different IP instead of the same IP.
If you don’t have multiple ip’s you’re still limited to the number of web services you can have, unless there is a meaningfully useful rockon for http/https proxy that I am unaware of?

In reading some of the other network related threads this is probably not a trivial change to include additional support for ips.

1 Like