Various Heroku related fixes.

.env.heroku

@@ -5,7 +5,7 @@ APP_KEY=7ahyYVPVsmxjdhsweWCauGeJfwc92NP2
 APP_LOG=errorlog
 APP_LOG_LEVEL=debug
 APP_URL=http://localhost
-TRUSTED_PROXIES=
+TRUSTED_PROXIES=*
 
 DB_CONNECTION=pgsql
 

app.json

@@ -39,7 +39,10 @@
   ],
   "addons": [
     {
-      "plan": "heroku-postgresql"
+      "plan": "heroku-postgresql",
+      "options": {
+        "version": "9.5"
+      }
     }
   ],
   "scripts": {

nginx_app.conf

@@ -1,7 +1,12 @@
+# prevent HTTPoxy vulnerability
+fastcgi_param HTTP_PROXY "";
+
 location / {
+    # try to serve file directly, fallback to rewrite
     try_files $uri @rewriteapp;
 }
 
 location @rewriteapp {
+    # rewrite all to index.php
     rewrite ^(.*)$ /index.php$1 last;
 }