Styjun

I have nginx setup to redirect all HTTP requests to HTTPS like so:

# Redirect every request to HTTPS...
server 
 listen 80;
 listen [::]:80;

 server_name .sub.example.com;
 return 301 https://$host$request_uri;

I have a requirement for a specific route to not be forced to HTTPS /iot/token/weather.

I tried updating the nginx config like so:

# Redirect every request to HTTPS...
server 
 listen 80;
 listen [::]:80;

 location ~* ^/iot/[0-9a-z]/weather$ 
 break;
 

 server_name .sub.example.com;
 return 301 https://$host$request_uri;

However the HTTP request was still being forced to HTTPS.

So I tried doing this:

# Redirect every request to HTTPS...
server 
 listen 80;
 listen [::]:80;

 server_name .sub.example.com;

 location ~* ^/iot/[0-9a-z]/weather$ 
 break;
 

 location / 
 return 301 https://$host$request_uri;
 

However this still isn't working.

The above is the only file imported in the before section below:

# FORGE CONFIG (DO NOT REMOVE!)
include forge-conf/sub.example.com/before/*;

server 
 listen 80;
 listen [::]:80;
 listen 443 ssl http2;
 listen [::]:443 ssl http2;
 server_name sub.example.com;
 root /home/forge/sub.example.com/public;

 # FORGE SSL (DO NOT REMOVE!)
 ssl_certificate /etc/nginx/ssl/sub.example.com/467330/server.crt;
 ssl_certificate_key /etc/nginx/ssl/sub.example.com/467330/server.key;

 ssl_protocols TLSv1.2;
 ssl_ciphers ECDHE-RSA-AES256-GCM-SHA512:DHE-RSA-AES256-GCM-SHA512:ECDHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-SHA384;
 ssl_prefer_server_ciphers on;
 ssl_dhparam /etc/nginx/dhparams.pem;

 add_header X-Frame-Options "SAMEORIGIN";
 add_header X-XSS-Protection "1; mode=block";
 add_header X-Content-Type-Options "nosniff";

 index index.html index.htm index.php;

 charset utf-8;

 # FORGE CONFIG (DO NOT REMOVE!)
 include forge-conf/sub.example.com/server/*;

 location / 
 try_files $uri $uri/ /index.php?$query_string;
 

 location = /favicon.ico access_log off; log_not_found off; 
 location = /robots.txt access_log off; log_not_found off; 

 access_log off;
 error_log /var/log/nginx/sub.example.com-error.log error;

 error_page 404 /index.php;

 location ~ .php$ 
 fastcgi_split_path_info ^(.+.php)(/.+)$;
 fastcgi_pass unix:/var/run/php/php7.2-fpm.sock;
 fastcgi_index index.php;
 include fastcgi_params;
 

 location ~ /.(?!well-known).* 
 deny all;
 


# FORGE CONFIG (DO NOT REMOVE!)
include forge-conf/sub.example.com/after/*;

I'd appreciate some help setting this up so that I can specify a URL to match that should not be redirected to HTTPS and then have all other URLs redirect to HTTPS.

Try it:

server 
 listen 443;

 location / 
 return 301 http://$server_name$request_uri;

 



server 
 listen 80;

 location /iot/ 
 return 301 http://$server_name$request_uri;

 

 location / 
 return 301 https://$server_name$request_uri; 
 

Should be separate 2 files, once for http port 80, other one for 443.