From 43ef0fc0d0b070d74b20794b304f4ee9cedad936 Mon Sep 17 00:00:00 2001 From: Pete Matsyburka Date: Thu, 21 Mar 2024 14:12:11 +0200 Subject: [PATCH] use FORCE_SSL=false --- config/environments/production.rb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/config/environments/production.rb b/config/environments/production.rb index 6c3cbea8..e85a1d91 100644 --- a/config/environments/production.rb +++ b/config/environments/production.rb @@ -60,7 +60,7 @@ Rails.application.configure do # config.action_cable.allowed_request_origins = [ "http://example.com", /http:\/\/example.*/ ] # Force all access to the app over SSL, use Strict-Transport-Security, and use secure cookies. - config.force_ssl = ENV['FORCE_SSL'].present? + config.force_ssl = ENV['FORCE_SSL'].present? && ENV['FORCE_SSL'] != 'false' # Include generic and useful information about system operation, but avoid logging too much # information to avoid inadvertent exposure of personally identifiable information (PII).