Phil Skentelbery 65d5dfdbd6 fix(security): exempt health endpoint from HTTPS enforcement ...

Docker health checks and load balancers call /health directly without
going through the reverse proxy, so they need HTTP access. This fix
exempts /health and /metrics endpoints from HTTPS enforcement in
production mode.

Fixes the issue where Docker health checks were being redirected to
HTTPS and failing because there's no TLS on localhost.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>

2025-11-22 11:45:06 -07:00

4.9 KiB

Raw Blame History

View Raw