Merge pull request #1792 from bear454/ssl-opt

Control config.force_ssl with an ENV variable

config/environments/production.rb

@@ -33,7 +33,7 @@ Osem::Application.configure do
   # config.action_dispatch.x_sendfile_header = 'X-Accel-Redirect' # for nginx
 
   # Force all access to the app over SSL, use Strict-Transport-Security, and use secure cookies.
-  # config.force_ssl = true
+  config.force_ssl = !!ENV['FORCE_SSL']
 
   # See everything in the log (default is :info)
   config.log_level = :info

dotenv.example

@@ -64,6 +64,9 @@ OSEM_SMTP_OPENSSL_VERIFY_MODE=""
 # Enable the usage of the devise ichain plugin
 OSEM_ICHAIN_ENABLED=false
 
+# enable this to force SSL
+# FORCE_SSL="1"
+
 # ReCAPTCHA keys
 RECAPTCHA_SITE_KEY=""
 RECAPTCHA_SECRET_KEY=""