3ab3a6a4f4
Test backoffice (smb-crm) / test (push) Successful in 1m32s
Root cause of the ICS-link-uses-http bug (#22): Caddy was already sending X-Forwarded-Proto/-Host/-For correctly (confirmed via the Caddy admin API's compiled route config), but Waitress strips untrusted X-Forwarded-* headers by default before they ever reach the WSGI environ -- so the earlier ProxyFix middleware had nothing to read. This was the actual fix; ProxyFix was necessary but not sufficient. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>