From 46ba728d8a08d2a065aee2e9b5d9c128757c15f4 Mon Sep 17 00:00:00 2001 From: simon lehericey Date: Wed, 9 May 2018 15:36:47 +0200 Subject: [PATCH] [fix #1913] force ssl and secure cookies --- config/environments/production.rb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/config/environments/production.rb b/config/environments/production.rb index c27fd85c1..32972ab87 100644 --- a/config/environments/production.rb +++ b/config/environments/production.rb @@ -42,7 +42,7 @@ Rails.application.configure do # config.action_dispatch.x_sendfile_header = 'X-Accel-Redirect' # for NGINX # Force all access to the app over SSL, use Strict-Transport-Security, and use secure cookies. - # config.force_ssl = true + config.force_ssl = true # Use the lowest log level to ensure availability of diagnostic information # when problems arise.