how to deploy symfony over http and https?

Question

We have a symfony project deployed and working ok but now we want to enable https.

We created and enabled another virtualhost like this:

<VirtualHost *:443>
ServerName      project.domain.net

DocumentRoot /home/user/dev/project/web
<Directory /home/user/dev/project/web>
    AllowOverride All
    Require all granted
</Directory>

# uncomment the following lines if you install assets as symlinks
# or run into problems when compiling LESS/Sass/CoffeScript assets
<Directory /home/user/dev/project>
  Options FollowSymlinks
</Directory>

ErrorLog /var/log/apache2/project.test_error.log
CustomLog /var/log/apache2/project.test_access.log combined


SSLEngine on
    SSLCertificateChainFile /ssl/cert.pem
    SSLCertificateKeyFile /ssl/private.key
    SSLCertificateFile /ssl/wildcard.crt

We can navigate to https://project.domain.net and it seems ok but when we check

    $request->getUri();

the result is http://project.domain.net, so it is http instead of https.

Why is that? how to fix?

UPDATE: We added the config given by @Leroy and the result is:

HTTP_X_FORWARDED_PROTO https
REQUEST_METHOD        GET
REQUEST_SCHEME         http
SERVER_NAME zerbikatdesa.sare.gipuzkoa.net
SERVER_PORT  80

and the $request->getUri still returns the http insted of https

(a) are you behind a proxy or load balancer? (b) why is this tagged Laravel? — apokryfos
– apokryfos, Commented Oct 21, 2021 at 20:56

Leroy · Accepted Answer · 2021-10-22 08:31:40Z

1

Usually applications must determine themselves which urls require ssl. In symfony you can configure routes to require ssl. Then the application can force ssl on those pages. But based on your request, all of your pages should be https.

Symfony uses 2 ways to determine if a route is secure. When you are behind a proxy, like a loadbalancer, you have to allow that proxy in the trusted_proxies and trusted_headers (usually there are env variables for you to configure). The proxy should also send a header that the page is loaded over https.

If you are not behind a proxy, like you do by defining a second vhost directing to the filesystem, you have to tell symfony a route is loaded over https. The same request header should be passed to the application.

So the following should fix it.

<VirtualHost *:443>
   RequestHeader set X-Forwarded-Proto https
</VirtualHost>

I also see you are using the /web subdirectory for public access. Are you still using Symfony version 2?

edited Oct 22, 2021 at 8:31

answered Oct 22, 2021 at 7:51

Leroy

2,1721 gold badge17 silver badges26 bronze badges

Sign up to request clarification or add additional context in comments.

1 Comment

Kioko Kiaza Over a year ago

No, it's version 3. I'll try this, thanks.

Collectives™ on Stack Overflow

how to deploy symfony over http and https?

1 Answer 1

1 Comment

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

1 Comment

Your Answer

Sign up or log in

Post as a guest

Related