In Nginx, how can I rewrite all http requests to https while maintaining sub-domain?

Question

I want to rewrite all http requests on my web server to be https requests, I started with the following:

server {
    listen      80;

    location / {
      rewrite     ^(.*)   https://mysite.com$1 permanent;
    }
...

One Problem is that this strips away any subdomain information (e.g., node1.mysite.com/folder), how could I rewrite the above to reroute everything to https and maintain the sub-domain?

Answer 1

The mothod you guys are using is actually one of the nginx pitfalls:

http://wiki.nginx.org/Pitfalls#Taxing_Rewrites

The correct code would be:

server {
       listen         80;
       server_name    my.domain.com;
       rewrite        ^ https://$server_name$request_uri? permanent;
}

server {
       listen         443;
       server_name    my.domain.com;

       ssl            on;

       [....]
}

I know it is a small change, but I thought it was useful to add.

Answer 2

I have been using nginx 0.8.39 and above, and used the following:

 server {
       listen 80;
       rewrite ^(.*) https://$host$1 permanent;
 }

Sends a permanent redirect to the client.

Answer 3

I think the best way should be this (according to already mentioned pitfails http://wiki.nginx.org/Pitfalls#Taxing_Rewrites):

server {
    listen         [::]:80;
    return 301 https://$host$request_uri;
}

If you dont want to change the hostname this is the way.

This does still work if you have no dns, as I am using it locally. I am requesting for example with http://192.168.0.100/index.php and will get redirected to exactly https://192.168.0.100/index.php. Thats what I want.

The solution from Saif Bechan uses the server_name which in my case is localhost but that is not reachable over a network.

The solution from Michael Neale is good but according to the pitfails, there is a better solution with redirect 301 ;)

Answer 4

The above didn't work for with with new subdomains being created all the time. e.g. AAA.example.com BBB.example.com for about 30 subdomains.

Finally got a config working with the following:

server {
  listen 80;
  server_name _;
  rewrite ^ https://$host$request_uri? permanent;
}
server {
  listen  443;
  server_name example.com;
  ssl on;
  ssl_certificate /etc/ssl/certs/myssl.crt;
  ssl_certificate_key /etc/ssl/private/myssl.key;
  ssl_prefer_server_ciphers       on;
# ...
# rest of config here
# ...
}

Answer 5

server {
    listen         [::]:80;
    return 301 https://$host$request_uri;
}

It only worked for me since I have a similar requirement (no change in hostname).