Merge pull request #1190 from alphagov/unforce-ssl

Don't force incoming HTTP requests to be over SSL
alphagov · Dec 5, 2023 · d5b105a · d5b105a
2 parents 3edbc4b + cfb8380
commit d5b105a
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/config/environments/production.rb b/config/environments/production.rb
@@ -35,7 +35,7 @@
   # config.assume_ssl = true
 
   # Force all access to the app over SSL, use Strict-Transport-Security, and use secure cookies.
-  config.force_ssl = true
+  # config.force_ssl = true
 
   # Info include generic and useful information about system operation, but avoids logging too much
   # information to avoid inadvertent exposure of personally identifiable information (PII). If you