From a5dbfcb4f799210976f584787337a34d76b09317 Mon Sep 17 00:00:00 2001
From: Remy Moll <me@moll.re>
Date: Sat, 27 Sep 2025 00:06:19 +0200
Subject: [PATCH] let ghost handle https properly

---
 deployment/deployment.yaml |  4 ++--
 deployment/ingress.yaml    | 15 ++++++++++++++-
 2 files changed, 16 insertions(+), 3 deletions(-)

diff --git a/deployment/deployment.yaml b/deployment/deployment.yaml
index 83499e1..25efe64 100644
--- a/deployment/deployment.yaml
+++ b/deployment/deployment.yaml
@@ -24,8 +24,8 @@ spec:
             value: development
           - name: database__connection__filename
             value: /var/lib/ghost/content/data/ghost.db
-          # - name: url
-          #   value: https://anydev.info
+          - name: url
+            value: https://anydev.info
           volumeMounts:
             - name: data
               mountPath: /var/lib/ghost/content/
diff --git a/deployment/ingress.yaml b/deployment/ingress.yaml
index 419e536..068e54c 100644
--- a/deployment/ingress.yaml
+++ b/deployment/ingress.yaml
@@ -12,6 +12,19 @@ spec:
     services:
     - name: anydev-web
       port: 2368
+    # ghost requires x-forwarded-proto header to https since it sits behind a reverse proxy
+    middlewares:
+    - name: anydev-https-redirect
 
   tls:
-    certResolver: default-tls 
+    certResolver: default-tls
+
+---
+apiVersion: traefik.io/v1alpha1
+kind: Middleware
+metadata:
+  name: anydev-https-redirect
+spec:
+  headers:
+    customRequestHeaders:
+      X-Forwarded-Proto: https