Merge pull request #2907 from hennevogel/bugfix/ssl-on-prod

Fix force_ssl environment handling
This commit is contained in:
Henne Vogelsang 2021-11-10 13:13:14 +01:00 committed by GitHub
commit 3bbbdb4aae
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
2 changed files with 2 additions and 2 deletions

View file

@ -46,7 +46,7 @@ Rails.application.configure do
# config.action_cable.allowed_request_origins = [ 'http://example.com', /http:\/\/example.*/ ]
# Force all access to the app over SSL, use Strict-Transport-Security, and use secure cookies.
config.force_ssl = ENV.fetch('FORCE_SSL') { 'false' }
config.force_ssl = true if ENV.fetch('FORCE_SSL', false)
# Include generic and useful information about system operation, but avoid logging too much
# information to avoid inadvertent exposure of personally identifiable information (PII).

View file

@ -109,7 +109,7 @@
# OSEM_LOG_LEVEL=info
# Force all access to the app over SSL, use Strict-Transport-Security, and use secure cookies.
# FORCE_SSL=1
# FORCE_SSL=true
# Your skylight.io keys
# SKYLIGHT_AUTHENTICATION=1234