From 9303ee399ff3333ba39787703d7d1a9cfae0102f Mon Sep 17 00:00:00 2001 From: MoeShin Date: Mon, 2 Feb 2026 11:07:15 +0800 Subject: [PATCH] feat: Optimize HTTP to HTTPS redirection rules for non-443 port websites (#11761) --- agent/app/service/website_utils.go | 11 +++++++++++ 1 file changed, 11 insertions(+) diff --git a/agent/app/service/website_utils.go b/agent/app/service/website_utils.go index 5f3662edb..40b2a0745 100644 --- a/agent/app/service/website_utils.go +++ b/agent/app/service/website_utils.go @@ -849,6 +849,17 @@ func applySSL(website *model.Website, websiteSSL model.WebsiteSSL, req request.W nginxParams[i].Params = []string{"ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA256:!aNULL:!eNULL:!EXPORT:!DSS:!DES:!RC4:!3DES:!MD5:!PSK:!KRB5:!SRP:!CAMELLIA:!SEED"} } } + if param.Name == "error_page" { + if len(param.Params) < 2 { + continue + } + code := param.Params[0] + if code == "497" { + if sslPort != 443 && param.Params[1] == "https://$host$request_uri" { + param.Params[1] = fmt.Sprintf("https://$host:%d$request_uri", sslPort) + } + } + } } if req.Hsts { var hstsValue string