Add CERT_BEHIND_PROXY setting to disable SSL certificate expiration warnings#2400
Open
jafolkerts wants to merge 2 commits intoamidaware:developfrom
Open
Add CERT_BEHIND_PROXY setting to disable SSL certificate expiration warnings#2400jafolkerts wants to merge 2 commits intoamidaware:developfrom
jafolkerts wants to merge 2 commits intoamidaware:developfrom
Conversation
…arnings Add support for CERT_BEHIND_PROXY setting in local_settings.py to disable SSL certificate expiration warnings when SSL termination is handled by an external reverse proxy. When CERT_BEHIND_PROXY is set to True, days_until_cert_expires() returns 999 instead of calculating the actual certificate expiration, effectively disabling the warning banner in the UI. This is useful for deployments where SSL termination occurs at a load balancer or reverse proxy layer, making the backend certificate expiration warnings irrelevant.
|
|
Updated .gitignore to exclude CLAUDE.local.md from version control.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
This PR adds support for a
CERT_BEHIND_PROXYsetting inlocal_settings.pyto disable SSL certificate expiration warnings when SSL termination is handled by an external reverse proxy.Changes
days_until_cert_expires()function inhelpers.pyto check for theCERT_BEHIND_PROXYsettingTrue, the function returns 999 days instead of calculating actual certificate expirationUse Case
This is useful for deployments where SSL termination occurs at a load balancer or reverse proxy layer (e.g., nginx, HAProxy, cloud load balancers), making the backend certificate expiration warnings irrelevant and potentially confusing.
Usage
Add to
local_settings.py:Testing
Tested on a production deployment with SSL termination at an external reverse proxy. The warning banner no longer appears in the UI after setting
CERT_BEHIND_PROXY = Trueand restarting services.