graham/towerops
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

force non-ssl

Browse source
This commit is contained in:
Graham McIntire 2026-02-01 12:03:14 -06:00
parent c856b2142c
commit 9dd5d8c0ac
No known key found for this signature in database
1 changed files with 2 additions and 10 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

12
config/prod.exs
View file

@ -25,13 +25,5 @@ config :swoosh, local: false
# manifest is generated by the `mix assets.deploy` task,
# which you should run after static files are built and
# before starting your production server.
config :towerops, ToweropsWeb.Endpoint,
cache_static_manifest: "priv/static/cache_manifest.json",
# Force SSL redirects and enable HSTS (HTTP Strict Transport Security)
# HSTS tells browsers to only use HTTPS for this domain for the next year
# Exclude /health endpoint from SSL redirect (used by K8s probes on internal network)
force_ssl: [
hsts: true,
rewrite_on: [:x_forwarded_host, :x_forwarded_port, :x_forwarded_proto],
exclude: ["health"]
]
config :towerops, ToweropsWeb.Endpoint, cache_static_manifest: "priv/static/cache_manifest.json"
# SSL/TLS is handled by Cloudflared proxy - no force_ssl needed