Pharos / Docs / v0.5.10

HTTPS and trusted reverse proxies

Updated 2026-09-08 · Pharos 0.5.10

Set APP_URL to the public HTTPS address. If TLS terminates at a proxy, configure TRUSTED_PROXIES with the actual trusted proxy IP addresses or CIDRs and ensure the proxy supplies the correct forwarded scheme and host.

APP_URL=https://status.example.com
TRUSTED_PROXIES=192.0.2.10

The address above is an example; replace it with your proxy's address. Do not trust arbitrary clients. After changing environment settings on PHP hosting, clear and rebuild configuration as appropriate:

php artisan optimize:clear
php artisan config:cache

For Docker, recreate the containers after changing environment settings. Verify login, component creation, service creation and the live status-page preview through the public HTTPS URL. Check the browser console for blocked mixed-content requests.