Behind a reverse proxy (HTTPS)

Samples for nginx, Traefik, Caddy and Apache are in the package under deploy/proxy/.

• The proxy must pass the Host header unchanged.
• Add the proxy's address in Settings → Security → Reverse proxies, so the real client address is believed only from the proxy.
• With authentication on, clients on trusted networks need no login. Never trust a network the proxy itself sits in.

reverse_proxy smart-transcode:8080          # Caddy: the whole configuration for a site