fix: force https via redirectscheme (replace deprecated Traefik v1 SSLForceHost/SSLHost) + correct comment

Reviewed-on: https://git.coopcloud.tech/coop-cloud/custom-html/pulls/10

compose.git-pull.yml

@@ -3,7 +3,7 @@ services:
   git:
     environment:
       - GIT_REPO_URL
-    image: alpine/git:v2.49.1
+    image: alpine/git:v2.54.0
     entrypoint: /docker-entrypoint.sh
     volumes:
       - content:/git

compose.yml

@@ -3,7 +3,7 @@ version: "3.8"
 
 services:
   app:
-    image: nginx:1.29.0
+    image: nginx:1.31.3
     networks:
       - proxy
     deploy:
@@ -15,11 +15,11 @@ services:
         - "traefik.http.routers.${STACK_NAME}.rule=Host(`${DOMAIN}`${EXTRA_DOMAINS})"
         - "traefik.http.routers.${STACK_NAME}.entrypoints=web-secure"
         - "traefik.http.routers.${STACK_NAME}.tls.certresolver=${LETS_ENCRYPT_ENV}"
-        # Redirect from EXTRA_DOMAINS to DOMAIN
+        # Force HTTPS (redirect http -> https) on DOMAIN and any EXTRA_DOMAINS
         - "traefik.http.routers.${STACK_NAME}.middlewares=${STACK_NAME}-redirect"
-        - "traefik.http.middlewares.${STACK_NAME}-redirect.headers.SSLForceHost=true"
-        - "traefik.http.middlewares.${STACK_NAME}-redirect.headers.SSLHost=${DOMAIN}"
-        - "coop-cloud.${STACK_NAME}.version=1.11.0+1.29.0"
+        - "traefik.http.middlewares.${STACK_NAME}-redirect.redirectscheme.scheme=https"
+        - "traefik.http.middlewares.${STACK_NAME}-redirect.redirectscheme.permanent=true"
+        - "coop-cloud.${STACK_NAME}.version=1.13.1+1.31.3"
         - "backupbot.backup=true"
         - "backupbot.backup.path=/usr/share/nginx/html"
     environment:

tests/test_recipe_local.py

@@ -1,12 +0,0 @@
-"""Recipe-local test shipped by the recipe repo (D4). Runs against the LIVE deployment via the
-cc-ci contract env vars CCCI_BASE_URL / CCCI_APP_DOMAIN."""
-import os, ssl, urllib.request
-
-
-def test_recipe_local_serves_content():
-    base = os.environ["CCCI_BASE_URL"]
-    ctx = ssl.create_default_context(); ctx.check_hostname = False; ctx.verify_mode = ssl.CERT_NONE
-    with urllib.request.urlopen(base, timeout=15, context=ctx) as r:
-        body = r.read().decode(errors="replace")
-    assert r.status == 200
-    assert "nginx" in body.lower(), "recipe-local: expected the served nginx page"