Run as https

[devfort]

Run as https

[georgebrock]

I've just bought the certificate. Waiting for Gandi's validation process to finish, then I'll install it on Heroku.

[georgebrock]

Still waiting, because something something DNS.

[beaujackson]

fwiw, currently receiving a cert warning because the certificate is for *.heroku.com

[georgebrock]

@beaujackson It won't work until we install a custom certificate, which we've bought, but we're waiting for verification that that own the domain.

[georgebrock]

The DNS finally propagated, and I've installed the certificate. I had to change the www CNAME to point to a different proxy on Heroku's end, but it should be working within a few hours.

[georgebrock]

I've turned on FULLY_SECURE, but I think the config it sets requires django-secure to be installed. When we do install it, we might need to be careful with the order of the middlewares so the redirect from http://behabitual.com to http://www.behabitual.com happens before the redirect from http to https.

The never ending HTTPS issue stays open for another day.

[georgebrock]

Finally :)