Ensure force_ssl flag does not break SYS api

Revert "Remove force ssl flag"
This reverts commit f5ecdb45b5.

[ci skip]

config/environments/production.rb

@@ -73,6 +73,18 @@ OpenProject::Application.configure do
 
   # Force all access to the app over SSL, use Strict-Transport-Security, and use secure cookies.
   config.force_ssl = OpenProject::Configuration['rails_force_ssl']
+  config.ssl_options = {
+    # Disable redirect on the internal SYS API
+    redirect: {
+      exclude: ->(request) do
+        # Respect the relative URL
+        relative_url = Regexp.escape(OpenProject::Configuration['rails_relative_url_root'])
+        # When we match SYS controller API, allow non-https access
+        request.path =~ /#{relative_url}\/sys\//
+      end
+    },
+    secure_cookies: true
+  }
 
   # Set to :debug to see everything in the log.
   config.log_level = :warn

lib/tasks/packager.rake

@@ -71,6 +71,11 @@ namespace :packager do
         ENV.fetch('SERVER_PROTOCOL', Setting.protocol)
       end
 
+    # Set https configured, set Rails force_ssl to true
+    if Setting.https?
+      shell_setup(['config:set', "OPENPROJECT_RAILS__FORCE__SSL=true"])
+    end
+
     # Run customization step, if it is defined.
     # Use to define custom postinstall steps required after each configure,
     # or to configure products.