Configure PREFERRED_URL_SCHEME and proxy settings to ensure external urls are created using the right domain and scheme

Author: jeremywmoore

.github/workflows/dev_deploy.yml

@@ -13,7 +13,7 @@ env:
   DEV_TF_PATH: terraform/dev
   DO_APP_NAME: dev-${{ github.head_ref }}
   HUSHLINE_INFRA_REPO: scidsg/hushline-infra
-  HUSHLINE_INFRA_REF: main
+  HUSHLINE_INFRA_REF: dev-server-name
 
 jobs:
   deploy:

hushline/__init__.py

@@ -5,6 +5,7 @@
 
 from flask import Flask, flash, redirect, request, session, url_for
 from flask_migrate import Migrate
+from werkzeug.middleware.proxy_fix import ProxyFix
 from werkzeug.wrappers.response import Response
 
 from . import admin, routes, settings
@@ -49,6 +50,11 @@ def create_app() -> Flask:
 
     # Handle the tips domain for profile verification
     app.config["SERVER_NAME"] = os.getenv("SERVER_NAME")
+    app.config["PREFERRED_URL_SCHEME"] = "https" if os.getenv("SERVER_NAME") is not None else "http"
+
+    if not app.config["IS_PERSONAL_SERVER"]:
+        # if were running the managed service, we are behind a proxy
+        app.wsgi_app = ProxyFix(app.wsgi_app, x_for=2, x_proto=1, x_host=0, x_port=0, x_prefix=0)
 
     # Run migrations
     db.init_app(app)