From 718b9ba5918bcc80aa5a66853c5d2ac3c6f1c9f3 Mon Sep 17 00:00:00 2001
From: Chaim <chaim@marcus-law.co.il>
Date: Sun, 15 Mar 2026 14:33:07 +0000
Subject: [PATCH] Fix: configure Apache to trust X-Forwarded-Proto from Traefik

---
 Dockerfile | 12 ++++++++++++
 1 file changed, 12 insertions(+)

diff --git a/Dockerfile b/Dockerfile
index 8d024192aa..f095207a28 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -5,6 +5,18 @@
 
 FROM espocrm/espocrm:latest
 
+# Fix redirect loop behind Traefik reverse proxy
+RUN a2enmod remoteip headers && \
+    echo '<IfModule mod_remoteip.c>\n\
+    RemoteIPHeader X-Forwarded-For\n\
+</IfModule>\n\
+<IfModule mod_headers.c>\n\
+    RequestHeader set X-Forwarded-Proto "https" env=HTTPS\n\
+</IfModule>\n\
+SetEnvIf X-Forwarded-Proto "https" HTTPS=on' \
+    > /etc/apache2/conf-available/reverse-proxy.conf && \
+    a2enconf reverse-proxy
+
 # Copy custom extensions and modifications
 COPY custom/ /var/www/html/custom/