From 689f6b00eeb0182c9ed35e03dc21db333a56c694 Mon Sep 17 00:00:00 2001
From: trivernis <trivernis@protonmail.com>
Date: Thu, 15 Feb 2024 15:56:41 +0100
Subject: [PATCH] apps(lychee): Fixing things

---
 apps/lychee/app/deploy.yaml | 4 ++--
 apps/lychee/app/route.yaml  | 5 ++---
 2 files changed, 4 insertions(+), 5 deletions(-)

diff --git a/apps/lychee/app/deploy.yaml b/apps/lychee/app/deploy.yaml
index ec4f979..fed42c7 100644
--- a/apps/lychee/app/deploy.yaml
+++ b/apps/lychee/app/deploy.yaml
@@ -42,8 +42,8 @@ spec:
           value: /lychee/db/lychee.db
         - name: APP_URL
           value: https://lychee.trivernis.net
-        # - name: APP_FORCE_HTTPS
-        #   value: "true"
+        - name: APP_FORCE_HTTPS
+          value: "true"
         - name: TRUSTED_PROXIES
           value: "*"
       volumes:
diff --git a/apps/lychee/app/route.yaml b/apps/lychee/app/route.yaml
index 60477d1..ab7d788 100644
--- a/apps/lychee/app/route.yaml
+++ b/apps/lychee/app/route.yaml
@@ -7,7 +7,7 @@ spec:
   headers:
     customRequestHeaders:
       X-Forwarded-Proto: https
-      X-Forwarded-SSL: on
+      X-Forwarded-SSL: off
 ---
 apiVersion: traefik.containo.us/v1alpha1
 kind: IngressRoute
@@ -21,9 +21,8 @@ spec:
   - match: Host(`lychee.trivernis.net`)
     kind: Rule
     middlewares:
-      - name: strict-security-headers
+      - name: security-headers
         namespace: default
-      - name: lychee-headers
     services:
     - name: lychee
       port: http