Articles in this section

Resolving HTTPS, Redirect, and Authentication Issues in Bold Reports Docker When SSL/TLS Termination Occurs Upstream

Published:
Updated:

Problem

After deploying Bold Reports Docker in an environment where SSL/TLS termination occurs before requests reach the application, users may experience:

  • Unexpected redirects or redirect loops
  • Login and authentication issues
  • Mixed HTTP and HTTPS content warnings
  • Report Viewer or Report Designer loading failures
  • Incorrect URL generation

Cause

This issue can occur when SSL/TLS termination happens before requests reach the Bold Reports Docker containers.

In such deployments, users access the application using HTTPS, but the HTTPS connection is terminated by an upstream component such as:

  • Reverse Proxy
  • Load Balancer
  • Cloudflare
  • Application Gateway
  • HAProxy

As a result, Bold Reports may not automatically recognize the original HTTPS request context unless SSL termination awareness is enabled.

Solution

Configure the following environment variable:

BOLD_SERVICES_REVERSE_PROXY=true

This setting enables Bold Reports Docker to correctly handle deployments where SSL/TLS termination occurs before requests reach the application.

When enabled, Bold Reports automatically processes the forwarded protocol information and appropriately handles X-Forwarded-Proto related behavior. This helps prevent:

  • Redirect issues
  • Authentication problems
  • Mixed-content warnings
  • Incorrect URL generation
  • Protocol mismatch issues

Docker Compose Configuration

environment:
  - BOLD_SERVICES_REVERSE_PROXY=true

Docker Run Configuration

docker run -d   -e BOLD_SERVICES_REVERSE_PROXY=true   boldreports/bold-reports

Reference

For more information about Docker environment variables, refer to:

https://github.com/boldreports/boldreports-server-in-docker/blob/master/docs/environment-variable.md

Conclusion

When SSL/TLS termination occurs before requests reach Bold Reports Docker, configure:

BOLD_SERVICES_REVERSE_PROXY=true

This allows Bold Reports to correctly process the original HTTPS request context and automatically handle X-Forwarded-Proto related behavior.


Was this article useful?
Like
Dislike
Help us improve this page
Please provide feedback or comments
Comments (0)
Access denied
Access denied