Merge branch 'OK-735-ovara-build-and-deploy' into MERGE__OK-735__OK-756

ovara-backend/src/main/resources/oph-configuration/application-prod.properties.template

@@ -11,4 +11,6 @@ ovara.backend.url=${opintopolku.virkailija.url}/ovara-backend
 ovara.ui.url=${opintopolku.virkailija.url}/raportointi
 cas.url=${opintopolku.virkailija.url}/cas
 ovara-backend.cas.username={{ovara_backend_cas_username}}
-ovara-backend.cas.password={{ovara_backend_cas_password}}
+ovara-backend.cas.password={{ovara_backend_cas_password}}
+
+ovara_backend.uses-ssl-proxy

ovara-backend/src/main/scala/fi/oph/ovara/backend/utils/ServletContainerConfiguration.scala

@@ -0,0 +1,20 @@
+package fi.oph.ovara.backend.utils
+
+import org.apache.catalina.connector.Connector
+import org.springframework.boot.autoconfigure.condition.ConditionalOnProperty
+import org.springframework.boot.web.embedded.tomcat.{TomcatConnectorCustomizer, TomcatServletWebServerFactory}
+import org.springframework.boot.web.server.WebServerFactoryCustomizer
+import org.springframework.context.annotation.{Bean, Configuration}
+
+@Configuration
+@ConditionalOnProperty(Array("ovara_backend.uses-ssl-proxy"))
+class ServletContainerConfiguration {
+
+  @Bean
+  def sslProxyCustomizer(): WebServerFactoryCustomizer[TomcatServletWebServerFactory] =
+    (container: TomcatServletWebServerFactory) =>
+      container.addConnectorCustomizers((connector: Connector) => {
+        connector.setScheme("https")
+        connector.setSecure(true)
+      })
+}