Changes to force the application to use ssl. (#184)

rubyforgood · Nov 22, 2017 · 8c09cb0 · 8c09cb0
1 parent 3aba315
commit 8c09cb0
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/config/environments/production.rb b/config/environments/production.rb
@@ -45,8 +45,9 @@
   # config.action_cable.allowed_request_origins = [ 'http://example.com', /http:\/\/example.*/ ]
 
   # Force all access to the app over SSL, use Strict-Transport-Security, and use secure cookies.
-  # config.force_ssl = true
 
+  config.force_ssl = true
+  config.ssl_options = { hsts: false }
   # Use the lowest log level to ensure availability of diagnostic information
   # when problems arise.
   config.log_level = :debug