Added SSL generation and use

.gitignore

@@ -1,3 +1,6 @@
+# Ignore all pem files
+*.pem
+
 # Upload folder
 images/
 

app.py

@@ -53,4 +53,9 @@ def home():
 
 if __name__ == "__main__":
     # Run the app with specified host and port from environment variables
-    app.run(host="0.0.0.0", port=int(os.getenv("PORT", 5000)), debug=False)
+    app.run(
+        ssl_context=("cert.pem", "key.pem"),
+        host="0.0.0.0",
+        port=int(os.getenv("PORT", 5000)),
+        debug=False,
+    )

ssl_generator.py

@@ -0,0 +1,56 @@
+from datetime import datetime, timedelta
+
+from cryptography import x509
+from cryptography.hazmat.primitives import hashes, serialization
+from cryptography.hazmat.primitives.asymmetric import rsa
+from cryptography.x509.oid import NameOID
+
+# Generate a private key
+private_key = rsa.generate_private_key(
+    public_exponent=65537,
+    key_size=2048,
+)
+
+# Create a public key
+public_key = private_key.public_key()
+
+# Create a self-signed certificate
+subject = issuer = x509.Name(
+    [
+        x509.NameAttribute(NameOID.COUNTRY_NAME, "US"),
+        x509.NameAttribute(NameOID.STATE_OR_PROVINCE_NAME, "California"),
+        x509.NameAttribute(NameOID.LOCALITY_NAME, "San Francisco"),
+        x509.NameAttribute(NameOID.ORGANIZATION_NAME, "My Company"),
+        x509.NameAttribute(NameOID.COMMON_NAME, "localhost"),
+    ]
+)
+certificate = (
+    x509.CertificateBuilder()
+    .subject_name(subject)
+    .issuer_name(issuer)
+    .public_key(public_key)
+    .serial_number(x509.random_serial_number())
+    .not_valid_before(datetime.now())
+    .not_valid_after(
+        datetime.now() + timedelta(days=365)  # Certificate valid for 1 year
+    )
+    .add_extension(
+        x509.SubjectAlternativeName([x509.DNSName("localhost")]),
+        critical=False,
+    )
+    .sign(private_key, hashes.SHA256())
+)
+
+# Write our certificate out to disk.
+with open("cert.pem", "wb") as f:
+    f.write(certificate.public_bytes(serialization.Encoding.PEM))
+
+# Write our private key out to disk.
+with open("key.pem", "wb") as f:
+    f.write(
+        private_key.private_bytes(
+            encoding=serialization.Encoding.PEM,
+            format=serialization.PrivateFormat.TraditionalOpenSSL,
+            encryption_algorithm=serialization.NoEncryption(),
+        )
+    )