From e90d28cc1038916fe00f7eeeeb9ccc6f44653508 Mon Sep 17 00:00:00 2001
From: SimolZimol <70102430+SimolZimol@users.noreply.github.com>
Date: Wed, 7 Jan 2026 04:12:57 +0100
Subject: [PATCH] 	modified:   app.py

---
 app.py | 7 ++++---
 1 file changed, 4 insertions(+), 3 deletions(-)

diff --git a/app.py b/app.py
index 90354f8..200beed 100644
--- a/app.py
+++ b/app.py
@@ -280,9 +280,10 @@ def store_command():
                 'expires_at': expires_at.isoformat()
             }
         
-        # Generate URL
-        base_url = request.host_url.rstrip('/')
-        retrieval_url = f"{base_url}/projects/itemeditor/storage/{command_uuid}"
+        # Generate URL - use HTTPS if behind proxy
+        scheme = request.headers.get('X-Forwarded-Proto', 'https' if request.is_secure else 'http')
+        host = request.headers.get('X-Forwarded-Host', request.host)
+        retrieval_url = f"{scheme}://{host}/projects/itemeditor/storage/{command_uuid}"
         
         return jsonify({
             'success': True,