From 498e8d2f6a760b516d29bfc6fb162f62940c0e6a Mon Sep 17 00:00:00 2001
From: Saufi <awalok@gmail.com>
Date: Thu, 18 Jun 2026 11:04:49 +0800
Subject: [PATCH] trust proxies

---
 bootstrap/app.php  | 5 +++++
 docker-compose.yml | 2 +-
 2 files changed, 6 insertions(+), 1 deletion(-)

diff --git a/bootstrap/app.php b/bootstrap/app.php
index 7998afa..cf78fba 100644
--- a/bootstrap/app.php
+++ b/bootstrap/app.php
@@ -11,6 +11,11 @@ return Application::configure(basePath: dirname(__DIR__))
         health: '/up',
     )
     ->withMiddleware(function (Middleware $middleware) {
+        $middleware->trustProxies(at: '*', headers: Request::HEADER_X_FORWARDED_FOR |
+            Request::HEADER_X_FORWARDED_HOST |
+            Request::HEADER_X_FORWARDED_PORT |
+            Request::HEADER_X_FORWARDED_PROTO);
+
         $middleware->alias([
             'admin' => \App\Http\Middleware\EnsureAdmin::class,
         ]);
diff --git a/docker-compose.yml b/docker-compose.yml
index e93252c..9cb10b4 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -12,7 +12,7 @@ services:
       APP_ENV: "${APP_ENV:-production}"
       APP_KEY: "${APP_KEY:-}"
       APP_DEBUG: "${APP_DEBUG:-false}"
-      APP_URL: "http://ratemas.apps.mbip.my"
+      APP_URL: "https://ratemas.apps.mbip.my"
       APP_TIMEZONE: "Asia/Kuala_Lumpur"
       APP_LOCALE: "ms"
       APP_FALLBACK_LOCALE: "en"