Makes force_ssl configurable

This commit is contained in:
Heiner Wohner 2018-01-22 14:43:04 +01:00
parent a65ab48b9f
commit 047fb0acb1
2 changed files with 4 additions and 1 deletions

View file

@ -42,7 +42,7 @@ Rails.application.configure do
# config.action_dispatch.x_sendfile_header = 'X-Accel-Redirect' # for NGINX
# Force all access to the app over SSL, use Strict-Transport-Security, and use secure cookies.
# config.force_ssl = true
config.force_ssl = SITE_CONFIG['force_ssl']
# Use the lowest log level to ensure availability of diagnostic information
# when problems arise.

View file

@ -25,6 +25,9 @@ secure_cookies: false
#
secret_token: "change-me"
# Set to true when your application is running with https
force_ssl: false
# Configure how static assets (images, stylesheets, etc.) will be served.
# The best practice is to have a proxying web server such as Apache or Nginx
# serve static assets (images, stylesheets, javascript) for you. Change