How do I enforce HTTPS-only access for my repository?
tl;dr
On the repository page, set Allow HTTP to NO under Advanced settings — only encrypted HTTPS connections will be permitted.
To ensure that all connections to your repository are encrypted:
- Go to Repositories and click on the repository you want to configure
- Under the Advanced section, make sure Allow HTTP is toggled to NO
- Click Save
When Allow HTTP is disabled, the repository will only be available through encrypted connections via https://, and plain http:// access will be blocked. This ensures that login details and repository contents are always transmitted securely.
Note: HTTPS access is always allowed regardless of this setting. This option only controls whether unencrypted HTTP access is also permitted.
