Forward client Host (with port) and scheme in reverse-proxy templates

The reverse-proxy templates set `proxy_set_header Host $host`, which
normalises the Host header and drops any non-standard port, and they
never forward the request scheme. Downstream apps that build absolute
URLs from the request (e.g. Drupal, Next.js) therefore emit URLs with
the wrong port and scheme when the proxy is published on a non-standard
host port such as https://app.local:37103 — the generated links point at
https://app.local (port 443) and 404.

Use $http_host to preserve the exact Host the client sent (including the
port), and forward X-Forwarded-Proto $scheme so the backend knows the
public scheme. Both listen ports (80/443) share one server block, so
$scheme is correct for either. Applied to all four reverse-proxy
variants (proxy, nextjs, storybook, vite); the drupal variant already
passes HTTP_HOST/HTTPS via fastcgi_params.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

Author: mikl

context/nextjs/etc/nginx/templates/default.conf.template

@@ -6,7 +6,8 @@ server {
 
     location / {
         proxy_pass ${NGINX_PROXY_PASS};
-        proxy_set_header Host $host;
+        proxy_set_header Host $http_host;
+        proxy_set_header X-Forwarded-Proto $scheme;
         proxy_set_header X-Real-IP $remote_addr;
         proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
     }
@@ -16,7 +17,8 @@ server {
         proxy_http_version 1.1;
         proxy_set_header Upgrade $http_upgrade;
         proxy_set_header Connection "Upgrade";
-        proxy_set_header Host $host;
+        proxy_set_header Host $http_host;
+        proxy_set_header X-Forwarded-Proto $scheme;
         proxy_set_header X-Real-IP $remote_addr;
         proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
     }

context/proxy/etc/nginx/templates/default.conf.template

@@ -6,7 +6,8 @@ server {
 
     location / {
         proxy_pass ${NGINX_PROXY_PASS};
-        proxy_set_header Host $host;
+        proxy_set_header Host $http_host;
+        proxy_set_header X-Forwarded-Proto $scheme;
         proxy_set_header X-Real-IP $remote_addr;
         proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
         # Increase buffer sizes, the defaults can be too tight for

context/storybook/etc/nginx/templates/default.conf.template

@@ -11,7 +11,8 @@ server {
 
     location / {
         proxy_pass ${NGINX_PROXY_PASS};
-        proxy_set_header Host $host;
+        proxy_set_header Host $http_host;
+        proxy_set_header X-Forwarded-Proto $scheme;
         proxy_set_header X-Real-IP $remote_addr;
         proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
 
@@ -26,7 +27,8 @@ server {
         proxy_http_version 1.1;
         proxy_set_header Upgrade $http_upgrade;
         proxy_set_header Connection "Upgrade";
-        proxy_set_header Host $host;
+        proxy_set_header Host $http_host;
+        proxy_set_header X-Forwarded-Proto $scheme;
         proxy_set_header X-Real-IP $remote_addr;
         proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
     }
@@ -36,7 +38,8 @@ server {
         proxy_http_version 1.1;
         proxy_set_header Upgrade $http_upgrade;
         proxy_set_header Connection "Upgrade";
-        proxy_set_header Host $host;
+        proxy_set_header Host $http_host;
+        proxy_set_header X-Forwarded-Proto $scheme;
         proxy_set_header X-Real-IP $remote_addr;
         proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
     }

context/vite/etc/nginx/templates/default.conf.template

@@ -6,7 +6,8 @@ server {
 
     location / {
         proxy_pass ${NGINX_PROXY_PASS};
-        proxy_set_header Host $host;
+        proxy_set_header Host $http_host;
+        proxy_set_header X-Forwarded-Proto $scheme;
         proxy_set_header X-Real-IP $remote_addr;
         proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;