search

cobyism / ghost-on-heroku

One-button Heroku deploy for the Ghost blogging platform.
MIT License
743 stars 686 forks source link

adding lets encrypt SSL to ghost blog #101

Closed jasan-s closed 6 years ago

jasan-s commented 7 years ago

this is a question rather than an issue, but I can't seem to figure out how to provision a lets encrypt SSL cert with this deployed blog on Heroku.

WaqasIbrahim commented 7 years ago

Follow this to generate a crt file and you can upload it. https://gethttpsforfree.com/

But you will need to upgrade to a paid dyno to use SSL.

jasan-s commented 7 years ago

@WaqasIbrahim thanks i actually tried that earlier , got as far as step 4 I assumed it would require DND TXT records or something for verification but it instead wanted me to run a local server or something. And I believe Heroku offers SSL starting with $7 hobby plan so if i upgrade i wouldn't need my own.

WaqasIbrahim commented 7 years ago

You can use the alternate method and verify by serving a file. And even if you want to use your own SSL, you will need to upgrade. SSL is not available for free dynos.

burdenless commented 7 years ago

Yes, you have to upgrade to Hobby dynos to use SSL.

Once you upgrade to a Hobby dyno, you can serve up the Let's Encrypt verification by adding a separate dyno and using a separate server, like a Python or NodeJS server, to serve the required route.

You can also use Heroku's new Automated Certificate Management with your Hobby-level dynos.

mars commented 6 years ago

As @byt3smith commented, Heroku ACM solves this problem by automating free SSL for custom domains with any paid dyno.