From a13ffba5fcbf54fe2ee89307af26599d357121f8 Mon Sep 17 00:00:00 2001 From: Josh Bruce Date: Tue, 16 Jan 2024 20:37:25 -0500 Subject: [PATCH] add: Force HTTPS --- site-root/public/.htaccess | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/site-root/public/.htaccess b/site-root/public/.htaccess index ac1b00b..01fe013 100644 --- a/site-root/public/.htaccess +++ b/site-root/public/.htaccess @@ -20,9 +20,9 @@ ErrorDocument 500 /error-500.html Header add Allow "GET, HEAD" # Force HTTPS - # RewriteCond %{HTTPS} !=on - # RewriteRule ^(.*)$ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301,NE] - # Header always set Content-Security-Policy "upgrade-insecure-requests;" + RewriteCond %{HTTPS} !=on + RewriteRule ^(.*)$ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301,NE] + Header always set Content-Security-Policy "upgrade-insecure-requests;" # Always remove www RewriteCond %{HTTP_HOST} ^www\.(.*)$ [NC]