merge: Enabled HSTS

Closes #154

See merge request opensavvy/formulaide!112

Author: maximegirardet

backend/build.gradle.kts

@@ -12,6 +12,7 @@ dependencies {
 	implementation(Ktor.server.netty)
 	implementation(Ktor.server.callLogging)
 	implementation(Ktor.server.auth)
+	implementation(Ktor.server.hsts)
 	implementation(Ktor.plugins.serialization)
 
 	implementation(KotlinX.serialization.core)

backend/src/main/kotlin/Backend.kt

@@ -5,6 +5,7 @@ import io.ktor.server.auth.*
 import io.ktor.server.engine.*
 import io.ktor.server.netty.*
 import io.ktor.server.plugins.callloging.*
+import io.ktor.server.plugins.hsts.*
 import io.ktor.server.response.*
 import io.ktor.server.routing.*
 import kotlinx.datetime.Clock
@@ -55,7 +56,11 @@ fun Application.formulaide() {
 		}
 	}
 
-	if (developmentMode) {
+	if (!developmentMode) {
+		install(HSTS) {
+			includeSubDomains = true
+		}
+	} else {
 		log.error("DEVELOPMENT MODE IS ENABLED. THIS IS NOT SAFE FOR PRODUCTION.")
 	}