fix: ERR_SSL_PROTOCOL_ERROR when using IP host.

riccox · Oct 19, 2024 · deee0d5 · deee0d5
1 parent b093a15
commit deee0d5
Show file tree

Hide file tree

Showing 2 changed files with 47 additions and 17 deletions.
diff --git a/index.html b/index.html
@@ -4,8 +4,6 @@
     <meta charset="UTF-8" />
     <link rel="shortcut icon" type="image/x-icon" href="/meili-logo.svg" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" />
-    <!-- to disable "Mixed Content: The page at '' was loaded over HTTPS, but requested an insecure resource ''. This request has been blocked; the content must be served over HTTPS." error when connecting to http(no ssl) backend. -->
-    <meta http-equiv="Content-Security-Policy" content="upgrade-insecure-requests" />
     <title>Meilisearch UI</title>
   </head>
   <body>

diff --git a/nginx.conf b/nginx.conf
@@ -1,28 +1,60 @@
-events { }
+events {
+}
 http {
 
   include mime.types;
   sendfile on;
 
   server {
-      listen        24900;
-      listen        [::]:24900;
-      server_name   localhost;
+    listen 24900;
+    listen [::]:24900;
+    server_name localhost;
+
+    #error_page  404              /404.html;
+    root /usr/share/nginx/html;
 
-      #error_page  404              /404.html;
+    # direct all traffic to index.html for client-side SPA routing
+    location / {
       root /usr/share/nginx/html;
+      index index.html index.htm;
+      try_files $uri $uri/ /index.html;
 
-      # direct all traffic to index.html for client-side SPA routing
-      location / {
-        try_files $uri $uri/ /index.html;
+      # enable CORS
+      if ($request_method = 'OPTIONS') {
+        add_header 'Access-Control-Allow-Origin' '*';
+        add_header 'Access-Control-Allow-Methods' 'GET, POST, OPTIONS';
+        #
+        # Custom headers and headers various browsers *should* be OK with but aren't
+        #
+        add_header 'Access-Control-Allow-Headers' 'DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range';
+        #
+        # Tell client that this pre-flight info is valid for 20 days
+        #
+        add_header 'Access-Control-Max-Age' 1728000;
+        add_header 'Content-Type' 'text/plain; charset=utf-8';
+        add_header 'Content-Length' 0;
+        return 204;
       }
-
-      # redirect server error pages to the static page /50x.html
-      #
-      error_page   500 502 503 504  /50x.html;
-      location = /50x.html {
-          root   /usr/share/nginx/html;
+      if ($request_method = 'POST') {
+        add_header 'Access-Control-Allow-Origin' '*' always;
+        add_header 'Access-Control-Allow-Methods' 'GET, POST, OPTIONS' always;
+        add_header 'Access-Control-Allow-Headers' 'DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range' always;
+        add_header 'Access-Control-Expose-Headers' 'Content-Length,Content-Range' always;
+      }
+      if ($request_method = 'GET') {
+        add_header 'Access-Control-Allow-Origin' '*' always;
+        add_header 'Access-Control-Allow-Methods' 'GET, POST, OPTIONS' always;
+        add_header 'Access-Control-Allow-Headers' 'DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range' always;
+        add_header 'Access-Control-Expose-Headers' 'Content-Length,Content-Range' always;
       }
+    }
+
+    # redirect server error pages to the static page /50x.html
+    #
+    error_page 500 502 503 504 /50x.html;
+    location = /50x.html {
+      root /usr/share/nginx/html;
+    }
   }
 
-}
+}