Disable force_ssl by default (Traefik handles SSL)
This commit is contained in:
@@ -28,7 +28,7 @@ Rails.application.configure do
|
||||
config.assume_ssl = true
|
||||
|
||||
# Force all access to the app over SSL, use Strict-Transport-Security, and use secure cookies.
|
||||
config.force_ssl = true
|
||||
config.force_ssl = ENV.fetch("RAILS_FORCE_SSL", "false") == "true"
|
||||
|
||||
# Skip http-to-https redirect for the default health check endpoint.
|
||||
# config.ssl_options = { redirect: { exclude: ->(request) { request.path == "/up" } } }
|
||||
@@ -94,6 +94,9 @@ Rails.application.configure do
|
||||
# Only use :id for inspections in production.
|
||||
config.active_record.attributes_for_inspect = [ :id ]
|
||||
|
||||
config.action_controller.default_url_options = { host: "fabsparestore.com", protocol: "https" }
|
||||
|
||||
|
||||
# Enable DNS rebinding protection and other `Host` header attacks.
|
||||
# config.hosts = [
|
||||
# "example.com", # Allow requests from example.com
|
||||
|
||||
Reference in New Issue
Block a user