nginx as a proxy and https

Zorg zorg at
Mon Feb 3 14:23:28 EST 2020


Another question about caldav

I want to server it behind a proxy with nginx

Does someone have a conf example that work

because I have try this, but for the moment, I manage to make it work 
without problem with   davx, thunderbird, evolution  but not with  
iphone (OS/13.3 ,iOS/10.3.4)

I'm not really sure that it come from nginx maybe it's because i have 
login like myuser1 at

here is my log - myuser1 at [03/Feb/2020:11:28:05 +0100] 
"PROPFIND /.well-known/caldav HTTP/1.1" 301 0 "-" "iOS/10.3.4 (14G61) 
accountsd/1.0" - myuser1 at [03/Feb/2020:11:28:05 +0100] 
"PROPFIND / HTTP/1.1" 207 280 "-" "iOS/10.3.4 (14G61) accountsd/1.0" - myuser1 at [03/Feb/2020:11:28:05 +0100] 
"PROPFIND /principals/ HTTP/1.1" 405 347 "-" "iOS/10.3.4 (14G61) 
accountsd/1.0" - myuser1 at [03/Feb/2020:11:28:05 +0100] 
"PROPFIND /calendar/dav/ HTTP/1.1" 405 
347 "-" "iOS/10.3.4 (14G61) accountsd/1.0"

but with davx i have (the %40 is replace by @) myuser1 at  [03/Feb/2020:19:21:35 +0100] 
"PROPFIND /dav/calendars/user/myuser1 at HTTP/1.1" 207 
616 "-" "DAVx5/ (2020/01/18; dav4jvm; okhttp/3.12.6) Android/9"

here is my conf

server {
         listen       443 ssl;

         ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
         ssl_prefer_server_ciphers on;
         ssl_ciphers "EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH";
         ssl_ecdh_curve secp384r1; # Requires nginx >= 1.1.0
         ssl_session_cache shared:SSL:10m;
         #ssl_dhparam /etc/ssl/dhparam.pem;

         access_log /var/log/nginx/dav.ssl.access.log;
         root /home/public;
         location / {
     proxy_set_header  X-Forwarded-For $proxy_add_x_forwarded_for;
     proxy_pass_header Authorization;

     proxy_set_header  Host $host;
     proxy_set_header  X-Real-IP $remote_addr;
     proxy_set_header  X-Forwarded-For $remote_addr;
     proxy_set_header  X-Forwarded-Host $remote_addr;

/etc/letsencrypt/live/; # managed by Certbot
/etc/letsencrypt/live/; # managed by Certbot


More information about the Info-cyrus mailing list