Solve for Config.HTTPS: HTTPS Not Enabled - High Confidence by conf…

…iguring `prod` to use SSL.
zorn · Sep 6, 2024 · bb9d305 · bb9d305
1 parent 18fe752
commit bb9d305
Showing 1 changed file with 10 additions and 6 deletions.
diff --git a/config/prod.exs b/config/prod.exs
@@ -1,11 +1,15 @@
 import Config
 
-# Note we also include the path to a cache manifest
-# containing the digested version of static files. This
-# manifest is generated by the `mix assets.deploy` task,
-# which you should run after static files are built and
-# before starting your production server.
-config :flick, FlickWeb.Endpoint, cache_static_manifest: "priv/static/cache_manifest.json"
+config :flick, FlickWeb.Endpoint,
+  # Note we also include the path to a cache manifest
+  # containing the digested version of static files. This
+  # manifest is generated by the `mix assets.deploy` task,
+  # which you should run after static files are built and
+  # before starting your production server.
+  cache_static_manifest: "priv/static/cache_manifest.json",
+
+  # https://hexdocs.pm/phoenix/using_ssl.html#hsts
+  force_ssl: [hsts: true]
 
 # Configures Swoosh API Client
 config :swoosh, api_client: Swoosh.ApiClient.Finch, finch_name: Flick.Finch