How do you force HTTPS with Namecheap and Heroku?

Question

I am working on setting up SSL with Heroku and Namecheap.

On Heroku I currently have the domains:

Domain Name - DNS Target
www.app.domain.io - www.app.domain.io.herokudns.com
www.domain.io - www.domain.io.herokudns.com

On NameCheap I have:

Type - Host - Value
CNAME Record - app - www.app.domain.io.herokudns.com
CNAME Record - www- www.domain.io.herokudns.com
URL Redirect Record - @ - https://www.domain.io
CNAME Record - www - https://www.domain.io

What works:

www.domain.io works fine and does not redirect to include https
domain.io just fails to reach a site
https://www.domain.io works great!
https://domain.io fails to reach a site.
http://www.app.domain.io/ fails to reach a site.
https://www.app.domain.io/ fails to reach a site.
http://app.domain.io/ reached the heroku nothing there yet page.

Ideally, all pages should always redirect to include https and www. Any idea what I'm doing wrong?

Checkout this answer here https://stackoverflow.com/a/58144352/5327882 — ronatory, Sep 28 '19 at 08:48

Programmingjoe · Accepted Answer · 2019-05-14T22:21:25.227

I fixed the problem. I added redirect records so that if the url was entered with or without www and with or without https it would be redirected to include https and www. This required 4 redirects for the domain.

In addition, the app.domain.io url had not content because I hadn't set something up there yet. I was planning on using the app.domain.io for a new heroku app later on.

Remember to wait long enough and try clearing your cache to see if the issue is resolved.

Edit

In my domain settings under Redirect Domain

Source Url       Destination Url
domain.xyz       https://www.domain.xyz/
www.domain.xyz   https://www.domain.xyz/

The above ensures https is always used.

In my domain advanced DNS settings under Host Records

Type                   Host    Value                      TTL
CNAME Record           www     <link from heroku>         30 min
URL Redirect Record    @       https://www.domain.xyz/    unmasked
URL Redirect Record    www     https://www.domain.xyz/      unmasked

This is what you need to do on namecheap to work with a heroku app. There is more to do on the heroku side of things.

In Heroku under app settings there is a Domains and certificates section. You can add your domain there. This will create a DNS Target which is what you put in the <link from heroku> block from above. Heroku will also let you use LetsEncrypt and they will automatically refresh your SSL certificate.

Remember to wait awhile between changes. DNS changes can take up to 24 hours to apply.

I didn't, maybe you need it if you want people to go to domain.com rather than www.domain.com? @CaleSwitzer — Programmingjoe, May 22 '19 at 14:08
Any ideas why this worked for me (exact same config) for the root `http://x.y` but not `http://www.x.y`? — Josh Mc, Jan 20 '20 at 03:57
I'm not sure, how long have you waited? Perhaps you just need to wait a bit longer for it to propagate? — Programmingjoe, Jan 21 '20 at 04:10

score 2 · Answer 2 · answered Apr 07 '20 at 07:55

For anyone using Heroku, Django, and namecheap that still has a similar problem (i.e. you have a working https website, but http is not automatically routed to https), you also have to set SECURE_SSL_REDIRECT = True in your settings.py file. Making this addition fixed the issue in my case.

This change, in addition to the URL configurations posted in @Programmingjoe's answer, should fix the issue.

How do you force HTTPS with Namecheap and Heroku?

2 Answers2