force ssl only if host passed

2023-10-29 19:10:41 +02:00
parent 607fc8d338
commit 50d3404f3b
3 changed files with 4 additions and 4 deletions
@@ -59,7 +59,7 @@ Rails.application.configure do
  # config.action_cable.allowed_request_origins = [ "http://example.com", /http:\/\/example.*/ ]

  # Force all access to the app over SSL, use Strict-Transport-Security, and use secure cookies.
-  config.force_ssl = ENV['FORCE_SSL'] == 'true'
+  config.force_ssl = ENV['FORCE_SSL'].present?

  # Include generic and useful information about system operation, but avoid logging too much
  # information to avoid inadvertent exposure of personally identifiable information (PII).