From 5a908ed5590270d72b4945944717b0be0b7b81d6 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Aur=C3=A9lien=20Bompard?= <aurelien@bompard.org>
Date: Wed, 21 Feb 2018 08:09:43 +0000
Subject: [PATCH] Hubs: adapt to SSL proxy

---
 roles/hubs/templates/hubs_config | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/roles/hubs/templates/hubs_config b/roles/hubs/templates/hubs_config
index f901915362..45a60661bf 100644
--- a/roles/hubs/templates/hubs_config
+++ b/roles/hubs/templates/hubs_config
@@ -9,6 +9,11 @@ OIDC_ID_TOKEN_COOKIE_SECURE = False
 
 OIDC_CLIENT_SECRETS = "{{ hubs_conf_dir }}/client_secrets.json"
 OIDC_OPENID_REALM = "{{ hubs_url }}/oidc_callback"
+{% if hubs_ssl_cert == None %}
+# There's an SSL proxy, flask_oidc will generate a redirect_uri without https
+# if we don't overwrite it here.
+OVERWRITE_REDIRECT_URI = "{{ hubs_url }}/oidc_callback"
+{% endif %}
 
 SSE_URL = {
     # "host": "sse.example.com",