fixed indien problem.

Seed list and init.sql both, so fresh volumes and existing databases
pick them up; their photos match by display name.

deploy/mysql/init.sql

@@ -78,7 +78,9 @@ INSERT INTO users (username, display_name, profile_image) VALUES
 ('kevin', 'Kevin', NULL),
 ('luc', 'Luc', NULL),
 ('tilde', 'Tilde', NULL),
-('mattis', 'Mattis', NULL);
+('mattis', 'Mattis', NULL),
+('chiel', 'Chiel', NULL),
+('tinne', 'Tinne', NULL);
 
 -- Insert universal password setting
 INSERT INTO settings (key_name, value) VALUES

src/ProostenKrant/Program.cs

@@ -1,10 +1,23 @@
 using Microsoft.AspNetCore.Authentication.Cookies;
+using Microsoft.AspNetCore.HttpOverrides;
 using Microsoft.AspNetCore.Mvc;
 
 var builder = WebApplication.CreateBuilder(args);
 
 builder.Configuration.AddEnvironmentVariables();
 
+// De app draait achter een reverse proxy (nginx) die TLS afhandelt en de
+// request als plain http doorgeeft. Zonder deze headers genereert de app
+// http://-redirects, die de enhanced navigation van Blazor breekt (fetch
+// weigert een https->http downgrade).
+builder.Services.Configure<ForwardedHeadersOptions>(options =>
+{
+    options.ForwardedHeaders = ForwardedHeaders.XForwardedFor | ForwardedHeaders.XForwardedProto;
+    // De proxy komt niet per se vanaf loopback (docker-netwerk of andere host).
+    options.KnownIPNetworks.Clear();
+    options.KnownProxies.Clear();
+});
+
 builder.Services.AddRazorComponents();
 builder.Services.AddCascadingAuthenticationState();
 
@@ -54,6 +67,8 @@ catch (Exception ex)
     Console.WriteLine($"Seed overslaan: {ex.Message}");
 }
 
+app.UseForwardedHeaders();
+
 if (!app.Environment.IsDevelopment())
 {
     app.UseExceptionHandler("/fout", createScopeForErrors: true);

src/ProostenKrant/Services/Seed.cs

@@ -32,6 +32,8 @@ public static class Seed
         ("luc", "Luc"),
         ("tilde", "Tilde"),
         ("mattis", "Mattis"),
+        ("chiel", "Chiel"),
+        ("tinne", "Tinne"),
     };
 
     public static async Task EnsureDefaultsAsync(Db db)