[GH-ISSUE #661] Problem using https on IOS devices (Safari browser) #560

Closed
opened 2026-02-26 06:33:23 +03:00 by kerem · 12 comments
Owner

Originally created by @sudvej on GitHub (Oct 16, 2020).
Original GitHub issue: https://github.com/NginxProxyManager/nginx-proxy-manager/issues/661

When you turn on the https protocol on IOS devices, the web page does not appear. Letsencrypt certificate used. Apache server. In other browsers (Opera, Firefox, MS Edge) the secure connection works without problems.

Originally created by @sudvej on GitHub (Oct 16, 2020). Original GitHub issue: https://github.com/NginxProxyManager/nginx-proxy-manager/issues/661 When you turn on the https protocol on IOS devices, the web page does not appear. Letsencrypt certificate used. Apache server. In other browsers (Opera, Firefox, MS Edge) the secure connection works without problems.
kerem 2026-02-26 06:33:23 +03:00
  • closed this issue
  • added the
    bug
    label
Author
Owner

@jc21 commented on GitHub (Oct 16, 2020):

Can't seem to replicate. I used these hosts on my iPhone every day.

<!-- gh-comment-id:710695673 --> @jc21 commented on GitHub (Oct 16, 2020): Can't seem to replicate. I used these hosts on my iPhone every day.
Author
Owner

@Wadera commented on GitHub (Oct 27, 2020):

I've faced similar issue too. To fix just set into Custom Nginx Configuration:

 proxy_hide_header Upgrade;

Full list of useful configs:

proxy_hide_header Upgrade;
proxy_hide_header X-Powered-By;
add_header Content-Security-Policy "upgrade-insecure-requests";
add_header X-Frame-Options "SAMEORIGIN";
add_header X-XSS-Protection "1; mode=block" always;
add_header X-Content-Type-Options "nosniff" always;
add_header Cache-Control "no-transform" always;
add_header Referrer-Policy no-referrer always;
add_header X-Robots-Tag none;
<!-- gh-comment-id:717465167 --> @Wadera commented on GitHub (Oct 27, 2020): I've faced similar issue too. To fix just set into **Custom Nginx Configuration**: ``` proxy_hide_header Upgrade; ``` Full list of useful configs: ``` proxy_hide_header Upgrade; proxy_hide_header X-Powered-By; add_header Content-Security-Policy "upgrade-insecure-requests"; add_header X-Frame-Options "SAMEORIGIN"; add_header X-XSS-Protection "1; mode=block" always; add_header X-Content-Type-Options "nosniff" always; add_header Cache-Control "no-transform" always; add_header Referrer-Policy no-referrer always; add_header X-Robots-Tag none; ```
Author
Owner

@thefirst100yearsaredifficult commented on GitHub (Oct 31, 2020):

I can’t replicate the issue too.

<!-- gh-comment-id:719926366 --> @thefirst100yearsaredifficult commented on GitHub (Oct 31, 2020): I can’t replicate the issue too.
Author
Owner

@Wadera commented on GitHub (Oct 31, 2020):

What's your httpd server behind proxy? What's configuration you using?
In my case it's:

  • Apache version 2.4.46. behind proxy
  • Scheme: https -> https (self-signed, server cert behind proxy and Let's encrypt on front from NPM)
  • x-Frame-Option set in in proxy and in apache config (where 192.168.1.123 is my proxy server IP):
RemoteIPHeader X-Forwarded-For
RemoteIPTrustedProxy 192.168.1.123
  • Bunch other options setup which I've show above - including XSS-Protection etc.
<!-- gh-comment-id:719930492 --> @Wadera commented on GitHub (Oct 31, 2020): What's your httpd server behind proxy? What's configuration you using? In my case it's: * **Apache version 2.4.46.** behind proxy * **Scheme:** https -> https (self-signed, server cert behind proxy and Let's encrypt on front from NPM) * **x-Frame-Option** set in in proxy and in apache config (where `192.168.1.123` is my proxy server IP): ``` RemoteIPHeader X-Forwarded-For RemoteIPTrustedProxy 192.168.1.123 ``` * **Bunch other options** setup which I've show above - including XSS-Protection etc.
Author
Owner

@florianeichincode commented on GitHub (Nov 5, 2020):

proxy_hide_header Upgrade;
proxy_hide_header X-Powered-By;
add_header Content-Security-Policy "upgrade-insecure-requests";
add_header X-Frame-Options "SAMEORIGIN";
add_header X-XSS-Protection "1; mode=block" always;
add_header X-Content-Type-Options "nosniff" always;
add_header Cache-Control "no-transform" always;
add_header Referrer-Policy no-referrer always;
add_header X-Robots-Tag none;

That worked for me thanks

<!-- gh-comment-id:722624807 --> @florianeichincode commented on GitHub (Nov 5, 2020): > proxy_hide_header Upgrade; > proxy_hide_header X-Powered-By; > add_header Content-Security-Policy "upgrade-insecure-requests"; > add_header X-Frame-Options "SAMEORIGIN"; > add_header X-XSS-Protection "1; mode=block" always; > add_header X-Content-Type-Options "nosniff" always; > add_header Cache-Control "no-transform" always; > add_header Referrer-Policy no-referrer always; > add_header X-Robots-Tag none; That worked for me thanks
Author
Owner

@matfortu commented on GitHub (Apr 12, 2021):

Thanks a lot, this fix worked perfectly for me too!

I've faced similar issue too. To fix just set into Custom Nginx Configuration:

 proxy_hide_header Upgrade;

Full list of useful configs:

proxy_hide_header Upgrade;
proxy_hide_header X-Powered-By;
add_header Content-Security-Policy "upgrade-insecure-requests";
add_header X-Frame-Options "SAMEORIGIN";
add_header X-XSS-Protection "1; mode=block" always;
add_header X-Content-Type-Options "nosniff" always;
add_header Cache-Control "no-transform" always;
add_header Referrer-Policy no-referrer always;
add_header X-Robots-Tag none;
<!-- gh-comment-id:817631100 --> @matfortu commented on GitHub (Apr 12, 2021): Thanks a lot, this fix worked perfectly for me too! > I've faced similar issue too. To fix just set into **Custom Nginx Configuration**: > > ``` > proxy_hide_header Upgrade; > ``` > > Full list of useful configs: > > ``` > proxy_hide_header Upgrade; > proxy_hide_header X-Powered-By; > add_header Content-Security-Policy "upgrade-insecure-requests"; > add_header X-Frame-Options "SAMEORIGIN"; > add_header X-XSS-Protection "1; mode=block" always; > add_header X-Content-Type-Options "nosniff" always; > add_header Cache-Control "no-transform" always; > add_header Referrer-Policy no-referrer always; > add_header X-Robots-Tag none; > ```
Author
Owner

@chaptergy commented on GitHub (May 12, 2021):

I think this issue can be closed now? Let me know if I my assumption is wrong.

<!-- gh-comment-id:840043366 --> @chaptergy commented on GitHub (May 12, 2021): I think this issue can be closed now? Let me know if I my assumption is wrong.
Author
Owner

@etfz commented on GitHub (Dec 13, 2021):

Can anyone offer some insight into why this happens and what the fix does? Is this something that would happen on any nginx setup?

<!-- gh-comment-id:992228707 --> @etfz commented on GitHub (Dec 13, 2021): Can anyone offer some insight into why this happens and what the fix does? Is this something that would happen on any nginx setup?
Author
Owner

@chaptergy commented on GitHub (Dec 13, 2021):

It seems to be an nginx issue, so yes, it would happen on any nginx setup. See the nginx issue or an explanation on serverfault

<!-- gh-comment-id:992285186 --> @chaptergy commented on GitHub (Dec 13, 2021): It seems to be an nginx issue, so yes, it would happen on any nginx setup. See [the nginx issue](https://trac.nginx.org/nginx/ticket/915) or [an explanation on serverfault](https://serverfault.com/questions/937253/https-doesnt-work-with-safari)
Author
Owner

@serjsv87 commented on GitHub (Sep 24, 2023):

It worked for me, thanks a lot for your help, many hours couldn't figure out what the problem was

<!-- gh-comment-id:1732524026 --> @serjsv87 commented on GitHub (Sep 24, 2023): It worked for me, thanks a lot for your help, many hours couldn't figure out what the problem was
Author
Owner

@C-Sovandy commented on GitHub (May 1, 2024):

I meet error the css and javascript doesn't loading on Safari but Chrome is ok.

CleanShot 2024-05-01 at 20 38 25@2x
<!-- gh-comment-id:2088477745 --> @C-Sovandy commented on GitHub (May 1, 2024): I meet error the css and javascript doesn't loading on Safari but Chrome is ok. <img width="1120" alt="CleanShot 2024-05-01 at 20 38 25@2x" src="https://github.com/NginxProxyManager/nginx-proxy-manager/assets/33998610/e9221a75-32a7-444d-aaa6-fa587f8532c9">
Author
Owner

@russeldsouzaFRM commented on GitHub (Aug 20, 2024):

I'm running a React JS application on an Nginx server (Ubuntu 22.04) and encountering problems with video playback on iOS devices. The videos play correctly on other platforms.
ios-ss

<!-- gh-comment-id:2298126596 --> @russeldsouzaFRM commented on GitHub (Aug 20, 2024): I'm running a React JS application on an Nginx server (Ubuntu 22.04) and encountering problems with video playback on iOS devices. The videos play correctly on other platforms. ![ios-ss](https://github.com/user-attachments/assets/f8e9d912-ccc5-41f3-94bc-7f373122c0f6)
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
starred/nginx-proxy-manager-NginxProxyManager#560
No description provided.