Correctly set secure flag by trusting CF proxy.

deployment.yaml

@@ -7,6 +7,7 @@ secrets:
   - DEFAULT_ADMIN_PASS
 
 env:
+  PRODUCTION: true
   REGISTRATION_GRAPHQL: "https://registration.dev.hack.gt/graphql"
 
 wants:

server/app.ts

@@ -58,6 +58,10 @@ const VERSION_HASH = require("git-rev-sync").short();
 
 export let app = express();
 
+if (config.server.production) {
+	app.enable("trust proxy");
+}
+
 app.use(compression());
 let cookieParserInstance = cookieParser(undefined, {
 	"path": "/",

server/config.ts

@@ -2,6 +2,7 @@ export interface IConfig {
 	server: {
 		port: number;
 		mongo: string;
+		production: boolean;
 	},
 	inputs: {
 		registration: string;
@@ -20,7 +21,8 @@ export interface IConfig {
 export const config: IConfig = {
 	server: {
 		port: envOrDefaultMap("PORT", 3000, parseInt),
-		mongo: envOrDefault("MONGO_URL", "mongodb://localhost/checkin")
+		mongo: envOrDefault("MONGO_URL", "mongodb://localhost/checkin"),
+		production: envOrDefault("PRODUCTION", "false").toLowerCase() === "true",
 	},
 	inputs: {
 		registration: envOrDefault("REGISTRATION_GRAPHQL", "https://registration.dev.hack.gt/graphql")

server/graphql.ts

@@ -286,7 +286,7 @@ export function setupRoutes(app: express.Express, registration: Registration) {
 		(request, response, next) => {
 			graphiqlExpress({
 				endpointURL: "/graphql",
-				subscriptionsEndpoint: createLink(request, "graphql", "wss")
+				subscriptionsEndpoint: createLink(request, "graphql", "ws")
 			})(request, response, next);
 		}
 	);