nginx-snippet.conf

more_clear_input_headers Rwthmatrikelnummer Shib-Session-Index Shib-Session-Id Shib-Identity-Provider Shib-Handler Shib-Application-Id Affiliation Shib-Authentication-Instant Shib-Authncontext-Class Entitlement; # add other headers here against spoofing

location  / {
    shib_request /shibauthorizer;
    shib_request_use_headers on;
    shib_request_set $shib_matrikelnr $upstream_http_Rwthmatrikelnummer;
    proxy_set_header Host $host;
    proxy_pass http://unix:/run/nginx/wahlsystem; # change this
}

location = /shibauthorizer {
    internal;
    include fastcgi_params;
    fastcgi_pass unix:/run/shibboleth/shibauthorizer.sock;
}

location /Shibboleth.sso {
    include fastcgi_params;
    fastcgi_pass unix:/run/shibboleth/shibresponder.sock;
}

location /shibboleth-sp {
    alias /etc/shibboleth/;
}