18F/18f.gsa.gov — pull request #197 by konklone (2014-09-19 15:29:40+00:00)
Title: Live hot-fix for Hydra

The listserv receiver, Hydra, doesn't run over HTTPS, and Chrome recently started flagging forms posting from `https://` to `http://` as mixed content.

This has been fixed on the incoming server by [adding a proxy to nginx](https://github.com/18F/18f.gsa.gov/commit/ae300ad29da1ee762e794e62cde4b08614c9da02):

```nginx
# proxy to hydra, cover up for their lack of HTTPS
location /listserv {
proxy_pass http://hydra.gsa.gov/cgi-bin/listserv.pl;
proxy_http_version 1.1;
proxy_redirect off;

# *don't* forward hostname or protocol
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_max_temp_file_size 0;

proxy_connect_timeout 10;
proxy_send_timeout 30;
proxy_read_timeout 30;
}
```

This will be merged into the site's versioned nginx.conf when #194 is merged.

In the meantime, this is a hot-fix, direct to `production` (which we **don't** usually do) that updates the current live site to use the proxy. This is the only way to test this out, and it gets rid of our mixed content warning off the bat. The only code change here is a form URL - the actual work is done in nginx.

I've already hot-fixed the form URL on the production site, but merging this PR will mean that any future deploys we do using the standard method on the to-be-replaced server will retain this fix.