Hello, I have a domain that uses SSL but only for a subfolder. The main site is a WP site that has a bunch of embedded videos that do not use SSL so we need to keep the root of the domain non SSL. the vhost looks like server { server_name domain.com www.domain.com; listen 80; listen 443 ssl spdy; I am not forcing SSL, only allowing the site to be loaded using SSL if you specify https. I've ensured WordPress siteurl is http not https It seems like centmin may be some how forcing SSL since SSL is detected? Is that even possible
That's because of this config: add_header Strict-Transport-Security "max-age=31536000; includeSubdomains;"; You can remove it.