Trailing slash middleware for the Infrastructure package (#53)

2026-08-24 17:33:52 +02:00
parent 1520c44b16
commit f6a77305ac
7 changed files with 293 additions and 10 deletions
@@ -19,12 +19,9 @@ services:
    environment:
      LOG_LEVEL: ${LOG_LEVEL:-info}
      HTTP_SERVER_NAME: ${HTTP_SERVER_NAME:-SiteWebsite}
-      SECURITY_STRICT_TRANSPORT_SECURITY: "${SECURITY_STRICT_TRANSPORT_SECURITY:-max-age=31536000; includeSubDomains}"
-      # Falls back to the policy the app ships with; set it in `.env` to allow the analytics origin,
-      # which must match `String.Analytics.origin`.
      SECURITY_CONTENT_SECURITY_POLICY: "${SECURITY_CONTENT_SECURITY_POLICY:-default-src 'self'; object-src 'none'; base-uri 'self'; frame-ancestors 'none'}"
-      # Persistence: a managed PostgreSQL database. Provide the password via the environment or a secret — never
-      # commit it.
+      SECURITY_STRICT_TRANSPORT_SECURITY: "${SECURITY_STRICT_TRANSPORT_SECURITY:-max-age=31536000; includeSubDomains}"
+      HTTPS_TRUST_FORWARDED_PROTO: "${HTTPS_TRUST_FORWARDED_PROTO:-true}"
      DATABASE_DRIVER: ${DATABASE_DRIVER:-postgres}
      DATABASE_HOST: ${DATABASE_HOST:?DATABASE_HOST is required}
      DATABASE_PORT: ${DATABASE_PORT:-5432}