Use Rails 5 default SSL options

The default options (which apply when `force_ssl` is set, which is the
default in CONSUL) are `{ hsts: { subdomains: true } }`, which means we
tell browsers to apply our SSL settings to subdomains as well [1].
CONSUL installations implementing multitenancy with subdomains will
benefit from this change.

[1] https://api.rubyonrails.org/classes/ActionDispatch/SSL.html
This commit is contained in:
Javi Martín
2020-09-04 17:22:33 +02:00
parent 0734e788bd
commit b1c112952f

View File

@@ -12,7 +12,6 @@ module Consul
# Overwrite Rails 5.0 defaults and use the options we used in Rails 4 # Overwrite Rails 5.0 defaults and use the options we used in Rails 4
config.active_record.belongs_to_required_by_default = false config.active_record.belongs_to_required_by_default = false
config.ssl_options = {}
# Set Time.zone default to the specified zone and make Active Record auto-convert to this zone. # Set Time.zone default to the specified zone and make Active Record auto-convert to this zone.
# Run "rake -D time" for a list of tasks for finding time zone names. Default is UTC. # Run "rake -D time" for a list of tasks for finding time zone names. Default is UTC.