TOS web UI http to https redirect - how-to

[justsimon]

Something that's been frustrating me is the lack of an option to redirect TOS web UI traffic to https. Also that my https session now and then gets redirected to http but using the https port, resulting in a 400 error, though I haven't seen anyone else report this.

After some googling, I've found how to fix both these issues by updating the web server config file (nginx.conf) file via SSH and a text editor.
DO THIS AT YOUR OWN RISK

I have an F5-420, but this should work for anyone whose TNAS is running nginx as the web server.
I use PuTTY for SSH, and Notepad++ to edit the config file.

1. Log in as root via SSH

2. Navigate to the nginx folder

Code: Select all

cd /etc/nginx

3. Copy nginx.conf to a share that you can access from another computer.

Code: Select all

cp nginx.conf /mnt/md0/<your share here>/

4. Rename nginx.conf so you have a backup of the original code.

Code: Select all

mv nginx.conf nginx-original.conf

Forward HTTP to HTTPS
5. Open nginx.conf in your preferred text editor, and locate this text:

Code: Select all

    #HTTP server
    server {
        listen 8580;
        include nginx-ipv6.conf;
        server_name znasnginx;
        root   /usr/www/;
        index  index.html index.htm index.php;

6. Insert the line

Code: Select all

return 301 https://$host:5443$request_uri;

after

Code: Select all

server_name znasnginx;

so that it now looks like this:

Code: Select all

    #HTTP server
    server {
        listen 8580;
        include nginx-ipv6.conf;
        server_name znasnginx;
        return 301 https://$host:5443$request_uri;
        root   /usr/www/;
        index  index.html index.htm index.php;

7. Save the edited nginx.conf file, then copy it back to the nginx folder (MAKE SURE YOU RENAMED THE ORIGINAL FILE IN STEP 4 BEFORE THIS).

Code: Select all

cp /mnt/md0/<your share here>/nginx.conf /etc/nginx/

8. Stop and start the nginx service.

Code: Select all

service nginx stop
service nginx start

9. Open a web browser and navigate to http://<your TNAS IP>:8580 and it should redirect to https://<your TNAS IP>:5443

OPTIONAL: Forward HTTP port 5443 to HTTPS 5443
As I seem to be the only person getting this error, you may not need to do this part.
10. Open nginx.conf in your preferred text editor, and locate this text:

Code: Select all

    #HTTPS server
    server {
        listen	5443;
        include nginx-ipv6-https.conf;
        server_name	znasnginx;
        root   /usr/www/;
        index  index.html index.htm index.php;

11. Insert the line

Code: Select all

error_page 497 https://$host:$server_port$request_uri;

after

Code: Select all

index  index.html index.htm index.php;

so that it now looks like this:

Code: Select all

    #HTTPS server
    server {
        listen	5443;
        include nginx-ipv6-https.conf;
        server_name	znasnginx;
        root   /usr/www/;
        index  index.html index.htm index.php;
        error_page 497 https://$host:$server_port$request_uri;

12. Save the edited nginx.conf file, then copy it back to the nginx folder (MAKE SURE YOU RENAMED THE ORIGINAL FILE IN STEP 4 BEFORE THIS).

Code: Select all

cp /mnt/md0/<your share here>/nginx.conf /etc/nginx/

13. Stop and start the nginx service.

Code: Select all

service nginx stop
service nginx start

14. Open a web browser and navigate to http://<your TNAS IP>:5443 and it should redirect to https://<your TNAS IP>:5443

[justsimon]

So this post has/had been viewed 80 times.

Is anyone finding this useful?
If you are, or aren't, can you post any feedback?

I'd love for this to gain some traction and then hopefully Terra-Master can dedicate some time to developing web UI functionality to do this.

Cheers,

-justsimon

[Spaniard]

Hi,
Thanks for the info. It would be nice if the forum had a "like" or "thanks" function for posts like this. Keeps threads tidy and provides feedback without making dozens of boring "+1" lines.

[konst82]

Hi.
Thanks for the tip. I think everyone needs to configure this.

[TMroy]

Thnak you! we already added it to our plan list.

[justsimon]

Awesome!
Any chance you can publish the plan list?