graham/prop
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Disable force_ssl — SSL terminated by Cloudflare tunnel

Browse source
This commit is contained in:
Graham McIntire 2026-04-02 10:20:43 -05:00
parent 1404923e97
commit bffe3616b5
No known key found for this signature in database
GPG key ID: F4ABF488E6029E59
2 changed files with 4 additions and 9 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

12
config/prod.exs
View file

@ -10,15 +10,9 @@ config :logger, level: :info
# before starting your production server. # before starting your production server.
config :microwaveprop, MicrowavepropWeb.Endpoint, cache_static_manifest: "priv/static/cache_manifest.json" config :microwaveprop, MicrowavepropWeb.Endpoint, cache_static_manifest: "priv/static/cache_manifest.json"
# Force using SSL in production. This also sets the "strict-security-transport" header, # SSL terminated by Cloudflare tunnel — no force_ssl needed.
# known as HSTS. If you have a health check endpoint, you may want to exclude it below. # config :microwaveprop, MicrowavepropWeb.Endpoint,
# Note `:force_ssl` is required to be set at compile-time. # force_ssl: [rewrite_on: [:x_forwarded_proto]]
config :microwaveprop, MicrowavepropWeb.Endpoint,
force_ssl: [rewrite_on: [:x_forwarded_proto]],
exclude: [
# paths: ["/health"],
hosts: ["localhost", "127.0.0.1"]
]
# Configure Swoosh API Client # Configure Swoosh API Client
config :swoosh, api_client: Swoosh.ApiClient.Req config :swoosh, api_client: Swoosh.ApiClient.Req

1
config/runtime.exs
View file

@ -55,6 +55,7 @@ if config_env() == :prod do
socket_options: maybe_ipv6 socket_options: maybe_ipv6
config :microwaveprop, MicrowavepropWeb.Endpoint, config :microwaveprop, MicrowavepropWeb.Endpoint,
# SSL terminated by Cloudflare tunnel; generated URLs still use https
url: [host: host, port: 443, scheme: "https"], url: [host: host, port: 443, scheme: "https"],
http: [ http: [
# Enable IPv6 and bind on all interfaces. # Enable IPv6 and bind on all interfaces.