Trust SSL proxies.

package.json

@@ -41,7 +41,7 @@
     "babel-preset-stage-0": "^6.5.0",
     "classnames": "^1.2.0",
     "express": "^4.12.0",
-    "express-force-ssl": "^0.3.0",
+    "express-force-ssl": "^0.3.1",
     "express-winston": "^0.3.1",
     "filepizza-socket": "^1.0.0",
     "newrelic": "^1.21.1",

src/server.js

@@ -71,7 +71,11 @@ app.use(expressWinston.logger({
   expressFormat: true
 }))
 
-if (process.env.NODE_ENV === 'production') {
+if (process.env.FORCE_SSL) {
+  app.set('forceSSLOptions', {
+    trustXFPHeader: true
+  })
+
   app.use(forceSSL)
 }