I have an emby server running and have setup the letsencrypt docker to get an ssl cert and also to use the reverse proxy. I followed the spaceinvader one video on how to set this up but have not been able to verify that the proxy is actually doing what I want it to do, which is to make sure all incoming requests are over https and all outgoing responses are https. 

 

I have tried checking the nginx access log but that got me more confused than confident as when an initial connection is made, it logs the response as https to my public domain, but after a device begins playback it logs HTTP/2 for the responses and doesn't specify if the traffic is actually being secured(encrypted). 

 

Long question made short, is there a way I can verify that all incoming traffic to my reverse proxy is over https and that all my responses are https as well?

So the access log does verify that the traffic is in HTTPS, but it doesnt do this for Roku devices apparently. It only shows HTTP/2 and instead of an address (https://mydomain.com) it shows "-" and then the device name.

 

any ideas as to why that would happen?

I have an emby server running and have setup the letsencrypt docker to get an ssl cert and also to use the reverse proxy. I followed the spaceinvader one video on how to set this up but have not been able to verify that the proxy is actually doing what I want it to do, which is to make sure all incoming requests are over https and all outgoing responses are https. 
 
I have tried checking the nginx access log but that got me more confused than confident as when an initial connection is made, it logs the response as https to my public domain, but after a device begins playback it logs HTTP/2 for the responses and doesn't specify if the traffic is actually being secured(encrypted). 
 
Long question made short, is there a way I can verify that all incoming traffic to my reverse proxy is over https and that all my responses are https as well?

You could sniff traffic on your network,eithed at the firewall or on unraid and view which packets are flowing on the wire.

Sent from my SM-N960W using Tapatalk