no forced ssl

backend/config/prod.exs

@@ -1,10 +1,6 @@
 import Config
 
-# Force using SSL in production. This also sets the "strict-security-transport" header,
-# known as HSTS. If you have a health check endpoint, you may want to exclude it below.
-# Note `:force_ssl` is required to be set at compile-time.
 config :backend, BackendWeb.Endpoint,
-  force_ssl: [rewrite_on: [:x_forwarded_proto]],
   exclude: [
     # paths: ["/health"],
     hosts: ["localhost", "127.0.0.1"]