Add HTTPS public key pinning

2016-06-10 17:48:41 +02:00
parent 68fba28dd9
commit 4b183c8976
4 changed files with 21 additions and 12 deletions
--- a/config/default.js
+++ b/config/default.js
@@ -6,6 +6,8 @@ module.exports = {

  server: {
    port: process.env.PORT || 8888,
+    upgradeHTTPS: process.env.UPGRADE_HTTPS,
+    publicKeyPin: process.env.PUBLIC_KEY_PIN
  },

  mongo: {
--- a/config/production.js
+++ b/config/production.js
@@ -5,7 +5,7 @@ module.exports = {
  },

  server: {
-    upgradeHTTP: true
-  },
+    upgradeHTTPS: process.env.UPGRADE_HTTPS || true // use HTTPS by default
+  }

 };