From c353d59d4038f7c963f1539cbc6de8a7f61a1bfa Mon Sep 17 00:00:00 2001 From: RenonDis Date: Thu, 7 Jun 2018 10:53:07 +0200 Subject: [PATCH] Updated changelog --- changes/changelog.d/264.enhancement | 37 +++++++++++++++++++++++++++++ 1 file changed, 37 insertions(+) create mode 100644 changes/changelog.d/264.enhancement diff --git a/changes/changelog.d/264.enhancement b/changes/changelog.d/264.enhancement new file mode 100644 index 000000000..f527e433c --- /dev/null +++ b/changes/changelog.d/264.enhancement @@ -0,0 +1,37 @@ +Album cover served in http (#264) + +Apache is now serving album covers in https +^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ + +Two issues are addressed here. The first one was about Django replying with +mixed content (http) when queried for covers. Setting up the `X-Forwarded-Proto` +allows Django to know that the client is using https, and that the reply must +be https as well. + +Second issue was a problem of permission causing Apache a denied access to +album cover folder. It was solved by adding another block for this path in +the Apache configuration file for funkwhale. + +Here is how to modify your `funkwhale.conf` : + + + + ... + Include /etc/letsencrypt/options-ssl-apache.conf + + #Add this new line + RequestHeader set X-Forwarded-Proto "https" + + ... + + #Add this new block below the other blocks + + Options FollowSymLinks + AllowOverride None + Require all granted + + + ... + + +