diff --git a/config/environments/production.rb b/config/environments/production.rb index 8ff1b70..2f6267a 100644 --- a/config/environments/production.rb +++ b/config/environments/production.rb @@ -35,7 +35,8 @@ # config.assume_ssl = true # Force all access to the app over SSL, use Strict-Transport-Security, and use secure cookies. - config.force_ssl = true + # NOTE: DataCite specific: This should not be enabled unless infrastructure has changed, ssl is handled via the load balancer proxy + # config.force_ssl = true # Skip http-to-https redirect for the default health check endpoint. # config.ssl_options = { redirect: { exclude: ->(request) { request.path == "/up" } } }