The admin panel (/ghost/) for your Ghost(Pro) blog is always secured with SSL. If you’d also like to serve the frontend of your blog via HTTPS, this can be achieved by using CloudFlare’s UniverSSL feature.
If you don’t have a custom domain, and are therefore using a URL like myblog.ghost.io, UniverSSL is already enabled by us. If you want to disable http on the frontend of your blog see the section on Forcing SSL-only below.
If you have a custom domain, you’ll need to setup your domain in CloudFlare, and use their DNS management tools to setup a CNAME record for your domain to point to your Ghost(Pro) blog. For more information on setting up CloudFlare see our CloudFlare guide.
Click on Crypto from the CloudFlare menu.
To enable UniverSSl, set SSL to full.
With UniverSSL enabled, the frontend of your blog will work with both http:// and https:// URLs.
To force all requests to be SSL-only, you need to enable this feature in your Ghost.org control panel.