SSL config

WebCms/Web.Release.config

@@ -28,4 +28,35 @@
       </customErrors>
     -->
   </system.web>
+	<system.webServer>
+		<rewrite xdt:Transform="Insert">
+			<rules>
+				<rule name="Redirect leafweb.ornl.gov to www.leafweb.org" stopProcessing="true">
+					<match url=".*" />
+					<conditions>
+						<add input="{HTTP_HOST}" pattern="^leafweb.ornl.gov$" />
+					</conditions>
+					<action type="Redirect" url="https://www.leafweb.org/" redirectType="Permanent" />
+				</rule>
+				<rule name="HTTP to HTTPS redirect" stopProcessing="true">
+					<match url="(.*)" />
+					<conditions>
+						<add input="{HTTPS}" pattern="off" ignoreCase="true" />
+					</conditions>
+					<action type="Redirect" url="https://{HTTP_HOST}/{R:1}"
+							redirectType="Permanent" />
+				</rule>
+			</rules>
+			<outboundRules>
+				<rule name="Add Strict-Transport-Security when HTTPS" enabled="true">
+					<match serverVariable="RESPONSE_Strict_Transport_Security"
+							pattern=".*" />
+					<conditions>
+						<add input="{HTTPS}" pattern="on" ignoreCase="true" />
+					</conditions>
+					<action type="Rewrite" value="max-age=31536000; includeSubDomains" />
+				</rule>
+			</outboundRules>
+		</rewrite>
+	</system.webServer>
 </configuration>

WebCms/Web.config

@@ -341,17 +341,6 @@
         <requestLimits maxAllowedContentLength="1000000000" />
       </requestFiltering>
     </security>
-		<rewrite>
-			<rules>
-				<rule name="Redirect leafweb.ornl.gov to www.leafweb.org" stopProcessing="true">
-					<match url=".*" />
-					<conditions>
-						<add input="{HTTP_HOST}" pattern="^leafweb.ornl.gov$" />
-					</conditions>
-					<action type="Redirect" url="http://www.leafweb.org/" redirectType="Permanent" />
-				</rule>
-			</rules>
-		</rewrite>
   </system.webServer>
   <runtime>
     <assemblyBinding xmlns="urn:schemas-microsoft-com:asm.v1">