feat: add weblink playlists, SSH player deployment, Caddy HTTPS, build player page

- Content model: add url column + is_weblink() for web page content items
- Player model: add deployment tracking fields (status, timestamps, message)
- Content blueprint: add add_weblink and add_weblink_to_playlist routes;
  weblinks auto-deleted when removed from playlist
- Players blueprint: add SSH deploy mode in add_player; weblink-aware playlist
- API blueprint: weblink URL served directly in playlist response;
  add /api/deploy/test-ssh and /api/deploy/player endpoints
- Admin blueprint: add build-player page (clone from Gitea, write base config);
  replace nginx status card with Caddy status on HTTPS config page
- caddy_manager: rewritten to generate proper HTTPS/internal-CA Caddyfiles
  and reload Caddy via admin API (/load) for live config updates
- ssh_deploy, background_tasks, player_build: new utils for SSH deployment
- background_tasks: push Flask app context into background thread so DB
  updates after deployment complete correctly
- ssh_deploy: robust install script detection with passwordless sudo injection
  (uses SSH credentials, cleaned up after install)
- Dockerfile: add git, sshpass, openssh-client, rsync
- docker-compose: switch nginx to Caddy on ports 80/443; add port 5000 for dev
- Templates: add_player deploy mode UI, weblink form in playlist/upload pages,
  build_player admin page, Caddy status on HTTPS config page
- Migrations: add_url_to_content, add_deployment_fields_to_player
- app.py: call db.create_all() on startup for schema bootstrap
- config.py: add PLAYER_CODE_DIR and PLAYER_REPO_URL settings

app/app.py

@@ -41,6 +41,11 @@ def create_app(config_name=None):
     # Apply ProxyFix middleware for reverse proxy (Nginx/Caddy)
     # This ensures proper handling of X-Forwarded-* headers
     app.wsgi_app = ProxyFix(app.wsgi_app, x_for=1, x_proto=1, x_host=1, x_port=1)
+
+    # ScriptNameFix: reads X-Script-Name header set by the umbrella nginx
+    # (e.g. /digiserver) so that url_for() generates correct full paths.
+    from app.utils.script_name_fix import ScriptNameFix
+    app.wsgi_app = ScriptNameFix(app.wsgi_app)
     
     # Initialize extensions
     db.init_app(app)
@@ -70,7 +75,15 @@ def create_app(config_name=None):
     register_commands(app)
     register_context_processors(app)
     register_template_filters(app)
-    
+
+    # Portal SSO: auto-login users arriving via the umbrella nginx gateway
+    from app.utils.portal_sso import init_portal_sso
+    init_portal_sso(app)
+
+    # Ensure DB schema exists (idempotent; safe to call even with migrate)
+    with app.app_context():
+        db.create_all()
+
     return app