add: Force HTTPS

8fold · Jan 17, 2024 · a13ffba · a13ffba
1 parent 031993c
commit a13ffba
Showing 1 changed file with 3 additions and 3 deletions.
diff --git a/site-root/public/.htaccess b/site-root/public/.htaccess
@@ -20,9 +20,9 @@ ErrorDocument 500 /error-500.html
 	Header add Allow "GET, HEAD"
 
 	# Force HTTPS
-	# RewriteCond %{HTTPS} !=on
-	# RewriteRule ^(.*)$ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301,NE]
-	# Header always set Content-Security-Policy "upgrade-insecure-requests;"
+	RewriteCond %{HTTPS} !=on
+	RewriteRule ^(.*)$ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301,NE]
+	Header always set Content-Security-Policy "upgrade-insecure-requests;"
 
 	# Always remove www
 	RewriteCond %{HTTP_HOST} ^www\.(.*)$ [NC]