From 45972e787242cf11d7d2047cc6d9feeb51b45b9e Mon Sep 17 00:00:00 2001
From: Zachary Corvidae <zach@sneakycrow.dev>
Date: Tue, 24 Dec 2024 12:12:35 -0800
Subject: [PATCH] Update https configuration

---
 k8s/overlays/staging/ingress.yaml | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/k8s/overlays/staging/ingress.yaml b/k8s/overlays/staging/ingress.yaml
index a470ca0..ccc215a 100644
--- a/k8s/overlays/staging/ingress.yaml
+++ b/k8s/overlays/staging/ingress.yaml
@@ -5,7 +5,7 @@ metadata:
   annotations:
     cert-manager.io/cluster-issuer: letsencrypt-prod
     nginx.ingress.kubernetes.io/ssl-redirect: "true"
-    nginx.ingress.kubernetes.io/backend-protocol: "HTTP"
+    nginx.ingress.kubernetes.io/backend-protocol: "HTTPS"
     nginx.ingress.kubernetes.io/proxy-body-size: "50m"
     # Cloudflare specific settings
     nginx.ingress.kubernetes.io/use-forwarded-headers: "true"
@@ -37,7 +37,7 @@ metadata:
   annotations:
     cert-manager.io/cluster-issuer: letsencrypt-prod
     nginx.ingress.kubernetes.io/ssl-redirect: "true"
-    nginx.ingress.kubernetes.io/backend-protocol: "HTTP"
+    nginx.ingress.kubernetes.io/backend-protocol: "HTTPS"
     nginx.ingress.kubernetes.io/proxy-body-size: "50m"
     nginx.ingress.kubernetes.io/use-forwarded-headers: "true"
     nginx.ingress.kubernetes.io/enable-real-ip: "true"
@@ -46,6 +46,7 @@ metadata:
     nginx.ingress.kubernetes.io/configuration-snippet: |
       proxy_set_header Authorization $http_authorization;
       proxy_pass_header Authorization;
+      proxy_set_header X-Forwarded-Proto https;
     nginx.ingress.kubernetes.io/proxy-set-headers: "ingress-nginx/custom-headers"
 spec:
   ingressClassName: nginx