From c8b6d23917609c14570678cd0fb63c527450c8f2 Mon Sep 17 00:00:00 2001
From: douwe <douwe.ravers@outlook.be>
Date: Wed, 14 Oct 2026 07:40:00 +0200
Subject: [PATCH] fixed indien problem.

---
 src/ProostenKrant/Program.cs | 15 +++++++++++++++
 1 file changed, 15 insertions(+)

diff --git a/src/ProostenKrant/Program.cs b/src/ProostenKrant/Program.cs
index 030ef10..946ffa8 100644
--- a/src/ProostenKrant/Program.cs
+++ b/src/ProostenKrant/Program.cs
@@ -1,10 +1,23 @@
 using Microsoft.AspNetCore.Authentication.Cookies;
+using Microsoft.AspNetCore.HttpOverrides;
 using Microsoft.AspNetCore.Mvc;
 
 var builder = WebApplication.CreateBuilder(args);
 
 builder.Configuration.AddEnvironmentVariables();
 
+// De app draait achter een reverse proxy (nginx) die TLS afhandelt en de
+// request als plain http doorgeeft. Zonder deze headers genereert de app
+// http://-redirects, die de enhanced navigation van Blazor breekt (fetch
+// weigert een https->http downgrade).
+builder.Services.Configure<ForwardedHeadersOptions>(options =>
+{
+    options.ForwardedHeaders = ForwardedHeaders.XForwardedFor | ForwardedHeaders.XForwardedProto;
+    // De proxy komt niet per se vanaf loopback (docker-netwerk of andere host).
+    options.KnownIPNetworks.Clear();
+    options.KnownProxies.Clear();
+});
+
 builder.Services.AddRazorComponents();
 builder.Services.AddCascadingAuthenticationState();
 
@@ -54,6 +67,8 @@ catch (Exception ex)
     Console.WriteLine($"Seed overslaan: {ex.Message}");
 }
 
+app.UseForwardedHeaders();
+
 if (!app.Environment.IsDevelopment())
 {
     app.UseExceptionHandler("/fout", createScopeForErrors: true);