coulomb/coulomb-social
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Disable SECURE_SSL_REDIRECT by default behind ingress TLS

Browse source 
Kubelet probes hit the pod over HTTP; redirect-on-all-requests breaks
readiness. TLS remains terminated at Traefik/ingress.
This commit is contained in:
tegwick 2026-08-09 02:24:02 +02:00
parent c71fb0fda9
commit 7067145bb0
1 changed files with 2 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

3
coulomb_social/settings/prod.py
View file

@ -6,4 +6,5 @@ DEBUG = False
SECURE_PROXY_SSL_HEADER = ("HTTP_X_FORWARDED_PROTO", "https")
SESSION_COOKIE_SECURE = True
CSRF_COOKIE_SECURE = True
SECURE_SSL_REDIRECT = config("SECURE_SSL_REDIRECT", default=True, cast=bool)
# TLS terminates at ingress; probes hit the pod over plain HTTP.
SECURE_SSL_REDIRECT = config("SECURE_SSL_REDIRECT", default=False, cast=bool)