Need an official, easy to find, tutorial for https reverse proxying

void walker

So I used chat gpt to come with the following nginx.conf:
and enabled "PROXY protocol & X-Forwarded-For:" after some googling.
This gets me working web interface via https, but no streaming. I noticed the stream urls are still http://. Modifying them to the new https url allowed me to stream.
What is the best approach here to get https streaming ? Can we modify tvheadend to generate the correct stream url, or do we have to make nginx redirect those to the correct one ? How ? I'd like the first approach if possible.

Also, can we have a full tutorial somewhere, it's pretty hard to google and make use of the first page hits, if you don't know what you're doing.

void walker

After some more research, I came up with this way to rewrite the urls in the m3u8 for streams:

Feels to me that it's a better approach than redirect, some clients might not handle redirects properly.
I also noticed https://www.stunnel.org/ being mentioned, would stunnel be better than this solution? and why.

void walker

Seems I forgot something, the /playlist endpoint.
I tried to use the same substitution rule as for the others, and this works when I do
curl -u user:pass -L --digest https://host.com:port/playlist
But when I try it in a browser (tried firefox, chromium), I still get http:// channel urls in the m3u file. Any idea what's going on ? I am thinking the redirect might have to do something with it, but it happens even when I go to /playlist/channels/ directly.

DeltaMikeCharlie

void walker Any idea what's going on ?

Can you run your curl command with verbose logging or similar?

Perhaps curl is using a different http verb to your browser or maybe the url rewriting process is also looking for a specific http client string.

void walker

Here is the verbose curl output that results in the expected https urls playlist being received:

I discovered today that there's a /playlist/auth endpoint as well, that still gets me http urls via browser, and correct https urls via curl (i changed the location path in nginx conf to /playlist/ instead of /playlist/channels for this).
This is the whole of the nginx config as of now: