graham/towerops
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

exclude healthcheck from ssl redirect

Browse source
This commit is contained in:
Graham McIntire 2026-02-01 11:27:08 -06:00
parent 0037f18848
commit 923fb4a9ed
No known key found for this signature in database
1 changed files with 6 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

7
config/prod.exs
View file

@ -29,4 +29,9 @@ config :towerops, ToweropsWeb.Endpoint,
cache_static_manifest: "priv/static/cache_manifest.json",
# Force SSL redirects and enable HSTS (HTTP Strict Transport Security)
# HSTS tells browsers to only use HTTPS for this domain for the next year
force_ssl: [hsts: true, rewrite_on: [:x_forwarded_host, :x_forwarded_port, :x_forwarded_proto]]
# Exclude /health endpoint from SSL redirect (used by K8s probes on internal network)
force_ssl: [
hsts: true,
rewrite_on: [:x_forwarded_host, :x_forwarded_port, :x_forwarded_proto],
exclude: ["health"]
]