<![CDATA[Mixed content warning while embedding]]>

<![CDATA[Mixed content warning while embedding]]>I embedded Kimai into Nextcloud (https://foo.bar) using the external sites addon. My embedded link looks like: https://time.foo.bar/

I also added CSP headers for Kimai to Kimai's security tab within Cloudron: frame-ancestors foo.bar;

If I open the site through Nextcloud, I get a mixed content warning and no content at all.

Mixed Content: The page at 'https://foo.bar/apps/external/8' was loaded over HTTPS, but requested an insecure frame 'http://time.foo.bar/de/login'. This request has been blocked; the content must be served over HTTPS.

The reason of this is because the client is redirected to the login form without https and therefore blocked because of mixed content. It is well documented at the Kimai documentation why this happens and what to do.

In our case we can add our (Cloudron) docker proxy as trused proxy: TRUSTED_PROXIES=172.18.0.1 to Kimai's .env file. I can edit the .env file during runtime but I can't edit the env.template so my changes do not persist app restarts or updates.

@nebulon / @girish can you please add the Cloudron proxy IP to Kimai's env.template? We have done something similar for Jirafeau, see Commit 0f5966a7

]]>https://forum.cloudron.io/topic/4848/mixed-content-warning-while-embeddingRSS for NodeWed, 15 Jul 2026 19:34:32 GMTWed, 07 Apr 2021 14:59:06 GMT60<![CDATA[Reply to Mixed content warning while embedding on Fri, 09 Apr 2021 06:08:56 GMT]]>Works

Many thanks!

]]>https://forum.cloudron.io/post/29440https://forum.cloudron.io/post/29440Fri, 09 Apr 2021 06:08:56 GMT<![CDATA[Reply to Mixed content warning while embedding on Thu, 08 Apr 2021 20:39:37 GMT]]>@subven I have pushed a fix for this.

]]>https://forum.cloudron.io/post/29432https://forum.cloudron.io/post/29432Thu, 08 Apr 2021 20:39:37 GMT<![CDATA[Reply to Mixed content warning while embedding on Thu, 08 Apr 2021 05:36:21 GMT]]>@subven Ah, thanks! I will fix the package.

]]>https://forum.cloudron.io/post/29383https://forum.cloudron.io/post/29383Thu, 08 Apr 2021 05:36:21 GMT