The admin panel (
/ghost/) for your site is always secured with SSL. If you'd like to serve the frontend of your publication via HTTPS you will need to enable Force SSL from the publication settings on my.ghost.org.
Note: If you are using a custom domain with your publication, you will need to route your DNS through Cloudflare.
To force all requests to be SSL-only, you need to enable this feature in your Ghost.org control panel.
- Log into your ghost.org account.
- Access your blog management settings by clicking the Owner dropdown menu to the right of the blog you are working with.
- Next, click Settings to view your blog management settings.
- Check the box for "I'm using CloudFlare UniverSSL and want to force SSL everywhere."
- Click Save.