fix #547: secure VM deployment behind HTTPS proxy

src/main/resources/application.yml

@@ -22,12 +22,21 @@ mybatis:
     map-underscore-to-camel-case: true
 
 server:
+  address: ${BACKOFFICE_BIND_ADDRESS:0.0.0.0}
   port: ${BACKOFFICE_PORT:8080}
+  forward-headers-strategy: ${BACKOFFICE_FORWARD_HEADERS_STRATEGY:none}
+  servlet:
+    session:
+      cookie:
+        secure: ${BACKOFFICE_SESSION_COOKIE_SECURE:false}
+        http-only: true
+        same-site: lax
 
 backoffice:
   security:
     admin-user: ${BACKOFFICE_ADMIN_USER:admin}
     admin-password: ${BACKOFFICE_ADMIN_PASSWORD:admin}
+    require-https: ${BACKOFFICE_REQUIRE_HTTPS:false}
   token:
     max-days: ${BACKOFFICE_TOKEN_MAX_DAYS:365}
   ords: