From b4ae69a519482f6ca954a6e8c22f209e16091132 Mon Sep 17 00:00:00 2001 From: Christoph Haas Date: Fri, 22 Jul 2016 11:59:14 +0200 Subject: [PATCH] Enforce HTTPS in production --- config/environments/production.rb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/config/environments/production.rb b/config/environments/production.rb index 65d43d9..a2433ae 100644 --- a/config/environments/production.rb +++ b/config/environments/production.rb @@ -46,7 +46,7 @@ Debshots::Application.configure do config.action_dispatch.x_sendfile_header = 'X-Accel-Redirect' # for nginx # Force all access to the app over SSL, use Strict-Transport-Security, and use secure cookies. - # config.force_ssl = true + config.force_ssl = true # Set to :debug to see everything in the log. # config.log_level = :info