Add ProxyFix for HTTPS and self-signed cert fallback

pdf_renamer.py

@@ -7,10 +7,15 @@ from datetime import datetime
 from functools import wraps
 from flask import Flask, request, render_template_string, redirect, url_for, session, send_from_directory, flash, get_flashed_messages, jsonify
 from werkzeug.utils import secure_filename
+from werkzeug.middleware.proxy_fix import ProxyFix
 from PyPDF2 import PdfReader
 from authlib.integrations.flask_client import OAuth
 
 app = Flask(__name__)
+
+# Trust proxy headers (since we're behind Nginx)
+app.wsgi_app = ProxyFix(app.wsgi_app, x_for=1, x_proto=1, x_host=1, x_prefix=1)
+
 app.config['UPLOAD_FOLDER'] = os.path.join(os.path.dirname(os.path.abspath(__file__)), 'processed')
 os.makedirs(app.config['UPLOAD_FOLDER'], exist_ok=True)
 app.config['MAX_CONTENT_LENGTH'] = 500 * 1024 * 1024  # 500MB limit