Final work for hsts

farhatahmad · Feb 1, 2024 · 19d30b7 · 19d30b7
1 parent 7a6ee67
commit 19d30b7
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 1 deletion.
diff --git a/.rubocop.yml b/.rubocop.yml
@@ -64,6 +64,7 @@ Metrics/BlockLength:
   AllowedMethods: [ 'describe', 'context', 'xdescribe', 'xcontext', 'FactoryBot.define' ]
   Exclude:
     - 'config/routes.rb'
+    - 'config/environments/production.rb'
   Max: 70
 
 Metrics/ClassLength:

diff --git a/config/environments/production.rb b/config/environments/production.rb
@@ -162,5 +162,8 @@
 
   # Enable HSTS in production mode
   config.force_ssl = true
-  config.ssl_options = { hsts: { preload: true, expires: 1.year, subdomains: true } }
+  config.ssl_options = {
+    redirect: { exclude: ->(request) { request.path.include?('health_check') } },
+    hsts: { expires: 1.year, subdomains: true }
+  }
 end