[getsat]

  config.force_ssl = true

Feels good, man. If only it were that easy to enable HSTS in all web frameworks.