Nginx-proxy-manager: Problem using https on IOS devices (Safari browser)

[sudvej]

When you turn on the https protocol on IOS devices, the web page does not appear. Letsencrypt certificate used. Apache server. In other browsers (Opera, Firefox, MS Edge) the secure connection works without problems.

[jc21]

Can't seem to replicate. I used these hosts on my iPhone every day.

[Wadera]

I've faced similar issue too. To fix just set into Custom Nginx Configuration:

 proxy_hide_header Upgrade;

Full list of useful configs:

proxy_hide_header Upgrade;
proxy_hide_header X-Powered-By;
add_header Content-Security-Policy "upgrade-insecure-requests";
add_header X-Frame-Options "SAMEORIGIN";
add_header X-XSS-Protection "1; mode=block" always;
add_header X-Content-Type-Options "nosniff" always;
add_header Cache-Control "no-transform" always;
add_header Referrer-Policy no-referrer always;
add_header X-Robots-Tag none;

[thefirst100yearsaredifficult]

I can’t replicate the issue too.

[Wadera]

What's your httpd server behind proxy? What's configuration you using?
In my case it's:

• Apache version 2.4.46. behind proxy
• Scheme: https -> https (self-signed, server cert behind proxy and Let's encrypt on front from NPM)
• x-Frame-Option set in in proxy and in apache config (where 192.168.1.123 is my proxy server IP):

RemoteIPHeader X-Forwarded-For
RemoteIPTrustedProxy 192.168.1.123

• Bunch other options setup which I've show above - including XSS-Protection etc.

[florianeichincode]

proxy_hide_header Upgrade;
proxy_hide_header X-Powered-By;
add_header Content-Security-Policy "upgrade-insecure-requests";
add_header X-Frame-Options "SAMEORIGIN";
add_header X-XSS-Protection "1; mode=block" always;
add_header X-Content-Type-Options "nosniff" always;
add_header Cache-Control "no-transform" always;
add_header Referrer-Policy no-referrer always;
add_header X-Robots-Tag none;

That worked for me thanks