Force setup-file download scheme to HTTPS

Up until now HTTPS was only offered by redirect, making MitM possible
before server redirect hit the client.
Add scheme-force to HTTPS to the url-generation.

fixes #963
master
Dario Ernst 4 years ago
parent 4ab977a9f1
commit 9a440e2604

@ -11,8 +11,8 @@ in a project directory. First create your project directory.</p>
to read and check the configuration variables generated by the wizard.</p> to read and check the configuration variables generated by the wizard.</p>
<pre><code>cd {{ root }} <pre><code>cd {{ root }}
wget {{ url_for('.file', uid=uid, filepath='docker-compose.yml', _external=True) }} wget {{ url_for('.file', uid=uid, _scheme='https', filepath='docker-compose.yml', _external=True) }}
wget {{ url_for('.file', uid=uid, filepath='mailu.env', _external=True) }} wget {{ url_for('.file', uid=uid, _scheme='https', filepath='mailu.env', _external=True) }}
</pre></code> </pre></code>
{% endcall %} {% endcall %}

@ -11,8 +11,8 @@ in a project directory. First create your project directory.</p>
to read and check the configuration variables generated by the wizard.</p> to read and check the configuration variables generated by the wizard.</p>
<pre><code>cd {{ root }} <pre><code>cd {{ root }}
wget {{ url_for('.file', uid=uid, filepath='docker-compose.yml', _external=True) }} wget {{ url_for('.file', uid=uid, _scheme='https', filepath='docker-compose.yml', _external=True) }}
wget {{ url_for('.file', uid=uid, filepath='mailu.env', _external=True) }} wget {{ url_for('.file', uid=uid, _scheme='https', filepath='mailu.env', _external=True) }}
</pre></code> </pre></code>
{% endcall %} {% endcall %}

Loading…
Cancel
Save