Login_check SSL issue with Reverse Proxy

Greetings and thank you for any assistance! I’ll keep the details to the concise info but please feel free to ask any deeper questions.

Architecture

  1. Hyper-V virtual machines running on a Windows 11 host.
  2. All VMs are Ubuntu 22 or 24 servers
  3. VM 1 is a reverse proxy server that’s handling the SSL and traffic routing to the Mautic VMs.
  4. VM 2 is a functioning Mautic 5 instance serving on port 80 but passing traffic securely back through to the VM1 reverse proxy server.

New Mautic 6 VM

  1. I setup a new VM and got Mautic 6 configured in the same way I did the previous instance.
  2. I’m able to load the new Mautic 6 in browser, over SSL, on the public domain.
  3. I’m able to get through the installer and to the login page on a valid SSL connection with cert.
  4. On attempted login, the /login_check path first gets hit insecurely on HTTP and login-loops right back to the Login page.

Solutions I’ve tried

  1. My site URL is correct in the Mautic config file

  2. Proxy and SSL mods are on

  3. I have trusted_hosts and truested_proxies set to the proper domains and IPs.

  4. Added SSL directives to my Mautic 6 VM virtualhost 80 and are pointing at the proper IP for the reverse proxy server. For example:

    ProxyPreserveHost On
    
    ProxyPass        /  https://127.0.0.1:443/
    ProxyPassReverse /  https://127.0.0.1:443/
    
    RequestHeader set X-Forwarded-Proto "http"
    RequestHeader set X-Forwarded-Port "443"
    

I think that’s about all I’ve got. I’ve probably tried some other minor things because I was at it for a few hours. Thank you again! :slight_smile:

Typo, this is actually: RequestHeader set X-Forwarded-Proto “https”