Open Esclide opened 4 years ago
I've fixed. However there are still more points: 1) Need to add 301 redirect from http to https. 2) Need to ensure that local development environments (usually without ssl) are working fine. For the second point probably environment variable should be set and interpreted. Or something like this: https://stackoverflow.com/questions/4723213/detect-http-or-https-then-force-https-in-javascript
added 301 redirect to https on deploy server's nginx
Please use let's encrypt for ssl certificate. Add force redirect from http to https. Check and validate with sslabs service.