From 30ba1b22e3fc5a137b5bde0c500de2308c422766 Mon Sep 17 00:00:00 2001
From: Michal Vrba <michal.vrba@gmai.com>
Date: Sun, 14 Dec 2025 16:06:27 +0100
Subject: [PATCH] fix

---
 TuneRipper.Api/web.config | 26 ++++++--------------------
 1 file changed, 6 insertions(+), 20 deletions(-)

diff --git a/TuneRipper.Api/web.config b/TuneRipper.Api/web.config
index 6bbda9b..0605e1f 100644
--- a/TuneRipper.Api/web.config
+++ b/TuneRipper.Api/web.config
@@ -5,30 +5,16 @@
       <handlers>
         <add name="aspNetCore" path="*" verb="*" modules="AspNetCoreModuleV2" resourceType="Unspecified" />
       </handlers>
-      <aspNetCore processPath="dotnet" arguments=".\TuneRipper.Api.dll" stdoutLogEnabled="false" stdoutLogFile=".\logs\stdout" hostingModel="inprocess">
+      <aspNetCore processPath="dotnet" 
+                  arguments=".\TuneRipper.Api.dll" 
+                  stdoutLogEnabled="true" 
+                  stdoutLogFile=".\logs\stdout" 
+                  hostingModel="inprocess"
+                  forwardWindowsAuthToken="false">
         <environmentVariables>
           <environmentVariable name="ASPNETCORE_ENVIRONMENT" value="Production" />
         </environmentVariables>
       </aspNetCore>
-      <rewrite>
-        <rules>
-          <rule name="Redirect to HTTPS" stopProcessing="true">
-            <match url=".*" />
-            <conditions>
-              <add input="{HTTPS}" pattern="off" ignoreCase="true" />
-            </conditions>
-            <action type="Redirect" url="https://{HTTP_HOST}/{R:0}" redirectType="Permanent" />
-          </rule>
-        </rules>
-      </rewrite>
-      <!-- Security headers -->
-      <httpProtocol>
-        <customHeaders>
-          <add name="X-Content-Type-Options" value="nosniff" />
-          <add name="X-Frame-Options" value="DENY" />
-          <add name="X-XSS-Protection" value="1; mode=block" />
-        </customHeaders>
-      </httpProtocol>
     </system.webServer>
   </location>
 </configuration>
\ No newline at end of file