diff --git a/config/environments/beta.rb b/config/environments/beta.rb index 626e1b6..910f877 100644 --- a/config/environments/beta.rb +++ b/config/environments/beta.rb @@ -39,7 +39,8 @@ Rails.application.configure do # Mount Action Cable outside main process or domain # config.action_cable.mount_path = nil # config.action_cable.url = 'wss://example.com/cable' - # config.action_cable.allowed_request_origins = [ 'http://example.com', /http:\/\/example.*/ ] + config.action_cable.allowed_request_origins = [ /https?:\/\/beta.parsley.elbert.us/ ] + # Force all access to the app over SSL, use Strict-Transport-Security, and use secure cookies. # config.force_ssl = true diff --git a/config/environments/production.rb b/config/environments/production.rb index 3feed77..46e122b 100644 --- a/config/environments/production.rb +++ b/config/environments/production.rb @@ -29,6 +29,8 @@ Rails.application.configure do # config.action_dispatch.x_sendfile_header = 'X-Sendfile' # for Apache # config.action_dispatch.x_sendfile_header = 'X-Accel-Redirect' # for NGINX + config.action_cable.allowed_request_origins = [ /https?:\/\/parsley.elbert.us/ ] + # Force all access to the app over SSL, use Strict-Transport-Security, and use secure cookies. # config.force_ssl = true