From 7067145bb01b0ec3ae80529658b05f96b6a974eb Mon Sep 17 00:00:00 2001 From: tegwick Date: Sun, 9 Aug 2026 02:24:02 +0200 Subject: [PATCH] Disable SECURE_SSL_REDIRECT by default behind ingress TLS Kubelet probes hit the pod over HTTP; redirect-on-all-requests breaks readiness. TLS remains terminated at Traefik/ingress. --- coulomb_social/settings/prod.py | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/coulomb_social/settings/prod.py b/coulomb_social/settings/prod.py index 004c6da..9030dd7 100644 --- a/coulomb_social/settings/prod.py +++ b/coulomb_social/settings/prod.py @@ -6,4 +6,5 @@ DEBUG = False SECURE_PROXY_SSL_HEADER = ("HTTP_X_FORWARDED_PROTO", "https") SESSION_COOKIE_SECURE = True CSRF_COOKIE_SECURE = True -SECURE_SSL_REDIRECT = config("SECURE_SSL_REDIRECT", default=True, cast=bool) +# TLS terminates at ingress; probes hit the pod over plain HTTP. +SECURE_SSL_REDIRECT = config("SECURE_SSL_REDIRECT", default=False, cast=bool)