force-ssl: trustproxy

config.json

@@ -26,5 +26,6 @@
         }
     },
 
+    "trustProxy": true,
     "forceSSL": true
 }

src/server/index.ts

@@ -29,6 +29,7 @@ app.use("/static/js",express.static("out/client"))
 app.use(cookieParser())
 
 // check for ssl, if not redirect
+if (config.trustProxy) app.enable("trust proxy")
 if (config.forceSSL) {
     app.use((req,res,next) => {
         if (req.protocol == "http") res.redirect(`https://${req.get("host")}${req.originalUrl}`)