add LIVEBOOK_FORCE_SSL env

README.md

@@ -184,6 +184,12 @@ The following environment variables configure Livebook:
     Enabled by default unless `LIVEBOOK_PASSWORD` is set. Set it to "false" to
     disable it.
 
+  * LIVEBOOK_FORCE_SSL - force SSL connections and enable HSTS.
+    Ensuring no data is ever sent via http, always redirect to https.
+
+  * LIVEBOOK_FORCE_SSL_HOST - set a new host to redirect to if the request's scheme is `http`. 
+    Defaults to nil.
+
 <!-- Environment variables -->
 
 If running Livebook as a Docker image or an Elixir release, [the environment

lib/livebook.ex

@@ -58,6 +58,14 @@ defmodule Livebook do
       config :livebook, :data_path, data_path
     end
 
+    if force_ssl = Livebook.Config.force_ssl!("LIVEBOOK_FORCE_SSL") do
+      config :livebook, :force_ssl, force_ssl
+    end
+
+    if force_ssl_host = Livebook.Config.force_ssl_host!("LIVEBOOK_FORCE_SSL_HOST") do
+      config :livebook, :force_ssl_host, force_ssl_host
+    end
+
     config :livebook,
            :cookie,
            Livebook.Config.cookie!("LIVEBOOK_COOKIE") ||

lib/livebook/config.ex

@@ -197,6 +197,20 @@ defmodule Livebook.Config do
     System.get_env(env, "1") in ~w(true 1)
   end
 
+  @doc """
+  Parses force ssl setting from env.
+  """
+  def force_ssl!(env) do
+    System.get_env(env, "0") in ~w(true 1)
+  end
+
+  @doc """
+  Parses force ssl host setting from env.
+  """
+  def force_ssl_host!(env) do
+    System.get_env(env)
+  end
+
   @doc """
   Parses and validates default runtime from env.
   """

lib/livebook_web/endpoint.ex

@@ -83,6 +83,20 @@ defmodule LivebookWeb.Endpoint do
 
   plug LivebookWeb.Router
 
+  plug :force_ssl
+
+  def force_ssl(conn, _opts) do
+    force_ssl = Application.get_env(:livebook, :force_ssl, false)
+    force_ssl_host = Application.get_env(:livebook, :force_ssl_host, nil)
+
+    if force_ssl || force_ssl_host do
+      plug_ssl = Plug.SSL.init(host: force_ssl_host)
+      Plug.SSL.call(conn, plug_ssl)
+    else
+      conn
+    end
+  end
+
   def access_struct_url() do
     base =
       case struct_url() do