From b0192e9b6680eb2b219173bb5b6b05b9eb590c68 Mon Sep 17 00:00:00 2001
From: sky121113 <sky121113@gmail.com>
Date: Mon, 2 Feb 2026 14:57:18 +0800
Subject: [PATCH] =?UTF-8?q?fix(nginx):=20=E6=AD=A3=E7=A2=BA=E8=BD=89?=
 =?UTF-8?q?=E7=99=BC=20X-Forwarded-Proto=20=E6=A8=99=E9=A0=AD=20(=E8=A7=A3?=
 =?UTF-8?q?=E6=B1=BA=20Mixed=20Content=20=E6=A0=B9=E6=BA=90=E5=95=8F?=
 =?UTF-8?q?=E9=A1=8C)?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 nginx/prod-proxy.conf | 9 ++++++++-
 1 file changed, 8 insertions(+), 1 deletion(-)

diff --git a/nginx/prod-proxy.conf b/nginx/prod-proxy.conf
index 165e952..3224bab 100644
--- a/nginx/prod-proxy.conf
+++ b/nginx/prod-proxy.conf
@@ -1,5 +1,12 @@
 # 正式環境 (Production) - 端口 80
 # 外部 SSL 終止後（如 Cloudflare/NPM）轉發至此端口
+
+# 定義 map 以正確處理 X-Forwarded-Proto
+map $http_x_forwarded_proto $proxy_x_forwarded_proto {
+    default $http_x_forwarded_proto;
+    ''      $scheme;
+}
+
 server {
     listen 80;
     server_name erp.koori.tw erp.mamaiclub.com;
@@ -9,7 +16,7 @@ server {
         proxy_set_header Host $host;
         proxy_set_header X-Real-IP $remote_addr;
         proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
-        proxy_set_header X-Forwarded-Proto $scheme;
+        proxy_set_header X-Forwarded-Proto $proxy_x_forwarded_proto;
         proxy_set_header X-Forwarded-Host $host;
     }
 }