diff --git a/app/controllers/application_controller.rb b/app/controllers/application_controller.rb
index d6ecdb7c082389d098a2b74dbbacae7863bc9259..780046c37334edbb01be1ce45b831b0d7f3a37b1 100644
--- a/app/controllers/application_controller.rb
+++ b/app/controllers/application_controller.rb
@@ -2,7 +2,7 @@ class ApplicationController < ActionController::Base
   helper_method :current_user
 
   def default_url_options
-    { host: 'rescheduled.c3lingo.org' }
+    { host: 'rescheduled.c3lingo.org', protocol: 'https' } if Rails.env.production?
   end
 
   private
diff --git a/config/environments/production.rb b/config/environments/production.rb
index 3f64ce1061abd911f9297b5e0a7c6756bcfdcaee..5c55563ef4383e24e63b68f41b147b88455a5cb9 100644
--- a/config/environments/production.rb
+++ b/config/environments/production.rb
@@ -46,7 +46,7 @@ Rails.application.configure do
 
   # Assume all access to the app is happening through a SSL-terminating reverse proxy.
   # Can be used together with config.force_ssl for Strict-Transport-Security and secure cookies.
-  # config.assume_ssl = true
+  config.assume_ssl = true
 
   # Force all access to the app over SSL, use Strict-Transport-Security, and use secure cookies.
   config.force_ssl = true