From a556a86db77e1dad927053bfa3ce06ace9c91569 Mon Sep 17 00:00:00 2001
From: grendervill <focuse@grandell.ru>
Date: Sat, 19 Sep 2026 20:32:18 +0300
Subject: [PATCH] =?UTF-8?q?fix(deploy):=20TLS=5FENABLED=20=D0=B2=D1=8B?=
 =?UTF-8?q?=D1=87=D0=B8=D1=81=D0=BB=D1=8F=D0=B5=D1=82=D1=81=D1=8F=20=D0=B2?=
 =?UTF-8?q?=20resolve=5Fderived=5Fvalues=20(=D0=B1=D1=8B=D0=BB=20unbound?=
 =?UTF-8?q?=20=D0=BF=D1=80=D0=B8=20=D0=B7=D0=B0=D0=BF=D0=B8=D1=81=D0=B8=20?=
 =?UTF-8?q?.env)?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 deploy/install.sh | 9 ++++++++-
 1 file changed, 8 insertions(+), 1 deletion(-)

diff --git a/deploy/install.sh b/deploy/install.sh
index ab758cf..272b973 100755
--- a/deploy/install.sh
+++ b/deploy/install.sh
@@ -315,13 +315,20 @@ resolve_derived_values() {
     GLCHAT_DATA_DIR="${GLCHAT_DATA_DIR}"
     GLCHAT_CADDY_PROFILE="${CADDY_PROFILE}"
     GLCHAT_TURN_CERT_DIR="${TURN_CERT_DIR}"
+    # TLS считается включённым и когда сертификаты обслуживает внешний прокси
+    # (--external-proxy --tls-terminated-by-proxy): ссылки в API должны быть https/wss.
+    if [ "$SKIP_TLS" = "1" ] && [ "$TLS_BY_PROXY" != "true" ]; then
+        TLS_ENABLED="false"
+    else
+        TLS_ENABLED="true"
+    fi
     GLCHAT_APP_BIND="${APP_BIND_ADDR}"
     GLCHAT_LIVEKIT_BIND="${LIVEKIT_BIND_ADDR}"
     export FILES_DOMAIN_RESOLVED CADDY_PROFILE LIVEKIT_PUBLISH TURN_EXTERNAL_TLS \
         livekit_extra_codecs \
         PROFILE_LIVEKIT_DISABLE_SIMULCAST PROFILE_LIVEKIT_USE_EXTERNAL_IP \
         GLCHAT_DATA_DIR GLCHAT_CADDY_PROFILE GLCHAT_TURN_CERT_DIR \
-        GLCHAT_APP_BIND GLCHAT_LIVEKIT_BIND \
+        GLCHAT_APP_BIND GLCHAT_LIVEKIT_BIND TLS_ENABLED \
         TURN_DOMAIN_RESOLVED TURN_CERT_DIR TURN_RELAY_HOST_RESOLVED TURN_SECRET_RESOLVED
 }