From 434e44a2a360541d8224ae42c48b65f0dae2d519 Mon Sep 17 00:00:00 2001 From: Christoph Haas Date: Sat, 6 Aug 2016 12:10:30 +0200 Subject: [PATCH] SSL can safely be enforced. nginx can handle that without loops now. --- config/environments/production.rb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/config/environments/production.rb b/config/environments/production.rb index 65d43d9..a2433ae 100644 --- a/config/environments/production.rb +++ b/config/environments/production.rb @@ -46,7 +46,7 @@ Debshots::Application.configure do config.action_dispatch.x_sendfile_header = 'X-Accel-Redirect' # for nginx # Force all access to the app over SSL, use Strict-Transport-Security, and use secure cookies. - # config.force_ssl = true + config.force_ssl = true # Set to :debug to see everything in the log. # config.log_level = :info