From fc817e78b0a12b50f1551671623e99412227fa48 Mon Sep 17 00:00:00 2001 From: Petko Bordjukov Date: Mon, 25 Sep 2017 18:51:52 +0300 Subject: [PATCH] Force SSL in production --- config/environments/production.rb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/config/environments/production.rb b/config/environments/production.rb index 009b7b5..ecfcc1f 100644 --- a/config/environments/production.rb +++ b/config/environments/production.rb @@ -40,7 +40,7 @@ Rails.application.configure do # config.action_cable.allowed_request_origins = [ 'http://example.com', /http:\/\/example.*/ ] # Force all access to the app over SSL, use Strict-Transport-Security, and use secure cookies. - # config.force_ssl = true + config.force_ssl = true # Use the lowest log level to ensure availability of diagnostic information # when problems arise.