Unable to log in behind a reverse proxy

[misterfish]

Hi, is the Docker-based installation of Decidim production-ready?

And, how does one make it work behind a reverse proxy, Apache for example?

We are able to access the landing page (https://our-domain/users/sign_in), so the proxy is working.

After signing in we get a Ruby stacktrace:

  ActionController::InvalidAuthenticityToken in Decidim::Devise::SessionsController#create
  ActionController::InvalidAuthenticityToken
  Extracted source (around line #211):
      def handle_unverified_request
        raise ActionController::InvalidAuthenticityToken
      end
    end
  end

In our Apache config we've got:

# On/Off both fail
# ProxyPreserveHost Off
# ProxyPreserveHost On

ProxyPass / http://localhost:3000/
ProxyPassReverse / http://localhost:3000/

Thanks.

[gdmhrobal]

I´ve got the same problem, a solution would be great.
Behind the reverse proxy the assets are also not loading.