add force ssl to env variables

.env_sample

@@ -12,4 +12,5 @@ FIRESTORE_PROJECT_ID=YOUR_FIRESTORE_PROJECT_ID
 FIRESTORE_KEY_FILE=YOUR_FIRESTORE_KEY_FILE
 FIRESTORE_KEY_FILE_PATH=YOUR_FIRESTORE_KEY_FILE_PATH
 POSTGRES_USER=YOUR_POSTGRES_USER
-POSTGRES_PASSWORD=YOUR_POSTGRES_PASSWORD
+POSTGRES_PASSWORD=YOUR_POSTGRES_PASSWORD
+FORCE_SSL=true

README.md

@@ -39,6 +39,8 @@ https://blockchain-staging.outerspacecoding.com
 * [ ] Better layout for the blockchain web interface
 * [ ] Add and correct documentation, create api documentation page
 ## Todo
+* [ ] Better Rack Cors Config
+* [ ] Add Rack Attack and Rack Attack Throttle
 * [ ] Simplify SMTP configuration
 * [ ] Create a template for the user registration email
 * [ ] Create blockchain report mailer to admin

config/environments/production.rb

@@ -8,6 +8,9 @@
   # Code is not reloaded between requests.
   config.cache_classes = true
 
+  # force ssl
+  config.force_ssl = ENV["FORCE_SSL"] == "true"
+
   # Eager load code on boot. This eager loads most of Rails and
   # your application in memory, allowing both threaded web servers
   # and those relying on copy on write to perform better.