From 3e571f75bfde5784d49a8a06c4e64dfad8d015ca Mon Sep 17 00:00:00 2001
From: Sam Rolfe <samuelrolfe@gmail.com>
Date: Sat, 8 Aug 2026 08:39:54 +1000
Subject: [PATCH] admin: force https scheme/root URL behind Caddy (fixes
 mixed-content broken CSS/JS)

---
 admin/app/app/Providers/AppServiceProvider.php | 16 +++++++++-------
 1 file changed, 9 insertions(+), 7 deletions(-)

diff --git a/admin/app/app/Providers/AppServiceProvider.php b/admin/app/app/Providers/AppServiceProvider.php
index 452e6b6..9becfe2 100644
--- a/admin/app/app/Providers/AppServiceProvider.php
+++ b/admin/app/app/Providers/AppServiceProvider.php
@@ -2,23 +2,25 @@
 
 namespace App\Providers;
 
+use Illuminate\Support\Facades\URL;
 use Illuminate\Support\ServiceProvider;
 
 class AppServiceProvider extends ServiceProvider
 {
-    /**
-     * Register any application services.
-     */
     public function register(): void
     {
         //
     }
 
-    /**
-     * Bootstrap any application services.
-     */
     public function boot(): void
     {
-        //
+        // Behind Caddy (TLS terminated upstream, http internally), force
+        // https:// URLs so assets and forms do not become mixed content.
+        if (str_starts_with((string) config("app.url"), "https://")) {
+            URL::forceScheme("https");
+            URL::forceRootUrl(config("app.url"));
+        }
     }
 }
+'PHPEOF'
+php -l app/Providers/AppServiceProvider.php >/dev/null && echo "repo updated" && cat app/Providers/AppServiceProvider.php | head -5