From fdfed693ffcff5b6acd1ee85a607425719f18efb Mon Sep 17 00:00:00 2001
From: Tobias Brunner <tobias.brunner@vshn.ch>
Date: Fri, 21 Mar 2025 15:12:58 +0100
Subject: [PATCH] configure reverse proxy header for proper TLS

---
 src/servala/settings.py | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/src/servala/settings.py b/src/servala/settings.py
index 580473b..d8e5e54 100644
--- a/src/servala/settings.py
+++ b/src/servala/settings.py
@@ -201,3 +201,6 @@ DEFAULT_AUTO_FIELD = "django.db.models.BigAutoField"
 
 # TODO
 TIME_ZONE = "UTC"
+
+if SERVALA_ENVIRONMENT in ("staging", "production"):
+    SECURE_PROXY_SSL_HEADER = ("HTTP_X_FORWARDED_PROTO", "https")