# Request made from incorrect origin. Expected 'http://localhost:2368' received 'https://blogs.mpaq.org'

**URL:** <https://forum.ghost.org/t/request-made-from-incorrect-origin-expected-http-localhost-2368-received-https-blogs-mpaq-org/62425>\
**Category:** Developer help\
**Created:** [April 3, 2026, 10:38pm UTC](https://forum.ghost.org/t/request-made-from-incorrect-origin-expected-http-localhost-2368-received-https-blogs-mpaq-org/62425 "2026-04-03T22:38:25Z")\
**Posts on this page:** 10\
**Page:** 1

<div class="post-metadata">

**Author:** ![MPAQ](https://avatars.discourse-cdn.com/v4/letter/m/ba8739/32.png) [@MPAQ](https://forum.ghost.org/u/MPAQ)\
**Post date:** [April 3, 2026, 10:38pm UTC](https://forum.ghost.org/t/request-made-from-incorrect-origin-expected-http-localhost-2368-received-https-blogs-mpaq-org/62425/1 "2026-04-03T22:38:25Z")

</div>

This is driving me insaine and is **probly** something simple:

- **What’s your URL**? [https://blogs.mpaq.org](https://blogs.mpaq.org)
- **What version of Ghost are you using?** latest

And

- How was Ghost installed and configured? from ghost-cli
- What Node version, database, OS & browser are you using? Debian 12,MariaDB 10.11.14, FireFox
- What errors or information do you see in the console? When connecting to /ghost/
- What steps could someone else take to reproduce the issue you’re having?

My config file is:  
{  
“url”: “[http://localhost:2368](http://localhost:2368)”,  
“server”: {  
“port”: 2368,  
“host”: “localhost”  
},  
“database”: {  
“client”: “mysql”,  
“connection”: {  
“host”: “xxx.xxx.xxx.xxx”,  
“user”: “xxx”,  
“password”: “xxx”,  
“database”: “xxx”  
}  
},  
“mail”: {  
“from”: “‘MPAQ’ [admin@mpaq.org](mailto:admin@mpaq.org)”,  
“transport”: “Direct”  
},  
“logging”: {  
“transports”: [  
“file”,  
“stdout”  
]  
},  
“process”: “systemd”,

“security”: {  
“staffDeviceVerification”: true  
},  
“paths”: {  
“contentPath”: “/var/www/ghost/content”  
}  
}  
NGINX:  
server {  
listen xxx.xxx.xxx.xxx:xx;  
server\_name [blogs.mpaq.org](http://blogs.mpaq.org);  
location / {  
proxy\_set\_header X-Forwarded-For $proxy\_add\_x\_forwarded\_for;  
proxy\_set\_header X-Forwarded-Proto $scheme;  
proxy\_set\_header X-Real-IP $remote\_addr;  
proxy\_set\_header Host $http\_host;  
proxy\_pass [http://127.0.0.1:2368](http://127.0.0.1:2368);  
}  
client\_max\_body\_size 50m;  
}

Please tell me I’m just getting old and blind 🙂

---

<div class="post-metadata">

**Author:** ![MPAQ](https://avatars.discourse-cdn.com/v4/letter/m/ba8739/32.png) [@MPAQ](https://forum.ghost.org/u/MPAQ)\
**Post date:** [April 6, 2026, 3:23pm UTC](https://forum.ghost.org/t/request-made-from-incorrect-origin-expected-http-localhost-2368-received-https-blogs-mpaq-org/62425/2 "2026-04-06T15:23:17Z")

</div>

I have tried [https://blogs.mpaq.org](https://blogs.mpaq.org), [http://blogs.mpaq.org](http://blogs.mpaq.org) and a lot of other things but this thing is still giving the same error with the different URLs. PLEASE help

---

<div class="post-metadata">

**Author:** ![vikaspotluri123](https://sea1.discourse-cdn.com/flex015/user_avatar/forum.ghost.org/vikaspotluri123/32/24_2.png) [@vikaspotluri123](https://forum.ghost.org/u/vikaspotluri123)\
**Post date:** [April 6, 2026, 4:16pm UTC](https://forum.ghost.org/t/request-made-from-incorrect-origin-expected-http-localhost-2368-received-https-blogs-mpaq-org/62425/3 "2026-04-06T16:16:21Z")

</div>

Try setting the URL in your config file to `https://blogs.mpaq.org`

---

<div class="post-metadata">

**Author:** ![MPAQ](https://avatars.discourse-cdn.com/v4/letter/m/ba8739/32.png) [@MPAQ](https://forum.ghost.org/u/MPAQ)\
**Post date:** [April 6, 2026, 4:20pm UTC](https://forum.ghost.org/t/request-made-from-incorrect-origin-expected-http-localhost-2368-received-https-blogs-mpaq-org/62425/5 "2026-04-06T16:20:53Z")

</div>

**Thank you so much for responding.** I think I tried that to but got the same problem. I’ll try it again.

---

<div class="post-metadata">

**Author:** ![Cathy\_Sarisky](https://sea1.discourse-cdn.com/flex015/user_avatar/forum.ghost.org/cathy_sarisky/32/25750_2.png) [@Cathy\_Sarisky](https://forum.ghost.org/u/Cathy_Sarisky)\
**Post date:** [April 6, 2026, 4:25pm UTC](https://forum.ghost.org/t/request-made-from-incorrect-origin-expected-http-localhost-2368-received-https-blogs-mpaq-org/62425/6 "2026-04-06T16:25:16Z")

</div>

be sure to restart ghost afterwards :)

---

<div class="post-metadata">

**Author:** ![MPAQ](https://avatars.discourse-cdn.com/v4/letter/m/ba8739/32.png) [@MPAQ](https://forum.ghost.org/u/MPAQ)\
**Post date:** [April 6, 2026, 4:33pm UTC](https://forum.ghost.org/t/request-made-from-incorrect-origin-expected-http-localhost-2368-received-https-blogs-mpaq-org/62425/7 "2026-04-06T16:33:24Z")

</div>

Yep and this is what comes up now, I thought I’d tried that too…

**The page isn’t redirecting properly**

---

<div class="post-metadata">

**Author:** ![MPAQ](https://avatars.discourse-cdn.com/v4/letter/m/ba8739/32.png) [@MPAQ](https://forum.ghost.org/u/MPAQ)\
**Post date:** [April 6, 2026, 6:06pm UTC](https://forum.ghost.org/t/request-made-from-incorrect-origin-expected-http-localhost-2368-received-https-blogs-mpaq-org/62425/8 "2026-04-06T18:06:03Z")

</div>

I set the URL in config to [https://blogs.mpaq.org](https://blogs.mpaq.org) and it stopped working for users, set to [http://blogs.mpaq.org](http://blogs.mpaq.org) comes up for the users.

Could it have something to do with nginx config???

---

<div class="post-metadata">

**Author:** ![vikaspotluri123](https://sea1.discourse-cdn.com/flex015/user_avatar/forum.ghost.org/vikaspotluri123/32/24_2.png) [@vikaspotluri123](https://forum.ghost.org/u/vikaspotluri123)\
**Post date:** [April 6, 2026, 6:40pm UTC](https://forum.ghost.org/t/request-made-from-incorrect-origin-expected-http-localhost-2368-received-https-blogs-mpaq-org/62425/9 "2026-04-06T18:40:29Z")

</div>

That normally occurs when you’re missing the x-forwarded-proto header in your ngind config. Note that you will want to fix this since setting the url as http will lead to weird (or maybe not weird as well) errors in the future

---

<div class="post-metadata">

**Author:** ![MPAQ](https://avatars.discourse-cdn.com/v4/letter/m/ba8739/32.png) [@MPAQ](https://forum.ghost.org/u/MPAQ)\
**Post date:** [April 6, 2026, 10:56pm UTC](https://forum.ghost.org/t/request-made-from-incorrect-origin-expected-http-localhost-2368-received-https-blogs-mpaq-org/62425/10 "2026-04-06T22:56:48Z")

</div>

Ok, and the above NGINX hasn’t changed so???:  
server {  
listen xxx.xxx.xxx.xxx:xx;  
server\_name [blogs.mpaq.org](http://blogs.mpaq.org);  
location / {  
proxy\_set\_header X-Forwarded-For $proxy\_add\_x\_forwarded\_for;  
proxy\_set\_header X-Forwarded-Proto $scheme;  
proxy\_set\_header X-Real-IP $remote\_addr;  
proxy\_set\_header Host $http\_host;  
proxy\_pass [http://127.0.0.1:2368](http://127.0.0.1:2368);  
}  
client\_max\_body\_size 50m;  
}

---

<div class="post-metadata">

**Author:** ![MPAQ](https://avatars.discourse-cdn.com/v4/letter/m/ba8739/32.png) [@MPAQ](https://forum.ghost.org/u/MPAQ)\
**Post date:** [April 7, 2026, 7:26pm UTC](https://forum.ghost.org/t/request-made-from-incorrect-origin-expected-http-localhost-2368-received-https-blogs-mpaq-org/62425/11 "2026-04-07T19:26:39Z")

</div>

**GOT IT!!!**

It seems multiple errors starting with NGINX so here is my config for anyone with this problem, NGINX wouldn’t let me do anything other then 443

server {  
listen xxx.xxx.xxx.xx:443 ssl;  
server\_name [news.mpaq.org](http://news.mpaq.org);  
client\_max\_body\_size 50m;  
ssl\_certificate /etc/apache2/ssl/fullchain.pem;  
ssl\_certificate\_key /etc/apache2/ssl/privkey.pem;  
location / {  
proxy\_pass [http://127.0.0.1:2368](http://127.0.0.1:2368);  
proxy\_set\_header Host $host;  
proxy\_set\_header Upgrade $http\_upgrade;  
proxy\_set\_header Connection “upgrade”;  
proxy\_set\_header X-Forwarded-For $remote\_addr;  
proxy\_set\_header X-Forwarded-Proto $scheme;  
}  
}
