add option to redirect all http traffic to https

README.md

@@ -78,6 +78,16 @@ You can replace the default nginx 404 and 500 error pages by defining the path t
 }
 ```
 
+#### HTTPS Only
+
+You can redirect all HTTP requests to HTTPS.
+
+```
+{
+  "https_only": true
+}
+```
+
 #### Proxy Backends
 For single page web applications like Ember, it's common to back the application with another app that's hosted on Heroku. The down side of separating out these two applications is that now you have to deal with CORS. To get around this (but at the cost of some latency) you can have the static buildpack proxy apps to your backend at a mountpoint. For instance, we can have all the api requests live at `/api/` which actually are just requests to our API server.
 

scripts/config/lib/nginx_config.rb

@@ -15,6 +15,7 @@ class NginxConfig
       end
     end
     json["clean_urls"] ||= false
+    json["https_only"] ||= false
     json["routes"] ||= {}
     json["routes"] = Hash[json["routes"].map {|route, target| [NginxConfigUtil.to_regex(route), target] }]
     json["redirects"] ||= {}

scripts/config/templates/nginx.conf.erb

@@ -46,6 +46,12 @@ http {
     }
   <% end %>
 
+  <% if https_only %>
+    if ($http_x_forwarded_proto != "https") {
+      return 301 https://$host$uri;
+    }
+  <% end %>
+
   <% redirects.each do |path, hash| %>
     location <%= path %> {
       return <%= hash['status'] || 301 %> <%= hash['url'] %>;

spec/fixtures/https_only/public_html/foo.html

+foobar

spec/fixtures/https_only/static.json

+{
+  "https_only": true
+}

spec/simple_spec.rb

@@ -72,6 +72,16 @@ RSpec.describe "Simple" do
     end
   end
 
+  describe "https only" do
+    let(:name) { "https_only" }
+
+    it "should redirect http to https" do
+      response = app.get("/foo")
+      expect(response.code).to eq("301")
+      expect(response['location']).to eq("https://#{AppRunner::HOST_IP}/foo")
+    end
+  end
+
   describe "custom error pages" do
     let(:name) { "custom_error_pages" }