Thinlinc html5 webaccess behind nginx reverse proxy

1 thinlinc 4.8 behind nginx reverse proxy

• CentOS 7
• Nginx 1.10
• public url: https://remote.domain.com/tl

1.1 nginx_ssl.conf

server {
	listen              443 ssl http2;
	server_name         localhost;
	ssl_certificate     /etc/letsencrypt/live/remote.domain.com/cert.pem;
	ssl_certificate_key /etc/letsencrypt/live/remote.domain.com/privkey.pem;
	ssl_protocols       TLSv1 TLSv1.1 TLSv1.2;
	ssl_ciphers         HIGH:!aNULL:!MD5;

	location /tl/ {
	proxy_pass https://192.168.223.111/;
	proxy_redirect /main/ /tl/main/;
	proxy_set_header Host $host;
	proxy_set_header X-Forwarded-Ssl on;
	proxy_set_header X-Real-IP $remote_addr;
	proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
	proxy_set_header Upgrade $http_upgrade;
	proxy_set_header Connection "upgrade";
	proxy_cookie_path / /tl/; 
	sub_filter ="/ ="/tl/;
	sub_filter :443/main/agent :443/tl/main/agent;
	sub_filter 192.168.223.111 $host;
	sub_filter websocket/ tl/websocket/;
	sub_filter_once off;
	} 
}