internal hostname included in back_url
The documentation recommends that Redmine run behind a reverse proxy such as nginx for doing SSL and caching.
Is it on purpose that the internal URL ("localhost" in my case) rather than the external URL from Administration --> Settings --> General --> Host_name is exposed in this configuration?
Every time a user hits a page and is redirected to the login page, the back_url parameter in the query string contains the host "localhost".
Attached is a patch to fix this, in case it is not intentional.