diff --git a/config/environments/production.rb b/config/environments/production.rb
index 4e2c2e79..a70ef729 100644
--- a/config/environments/production.rb
+++ b/config/environments/production.rb
@@ -33,7 +33,7 @@ Osem::Application.configure do
   # config.action_dispatch.x_sendfile_header = 'X-Accel-Redirect' # for nginx
 
   # Force all access to the app over SSL, use Strict-Transport-Security, and use secure cookies.
-  # config.force_ssl = true
+  config.force_ssl = !!ENV['FORCE_SSL']
 
   # See everything in the log (default is :info)
   config.log_level = :info
diff --git a/dotenv.example b/dotenv.example
index 2c5c0b94..a5622a4c 100644
--- a/dotenv.example
+++ b/dotenv.example
@@ -64,6 +64,9 @@ OSEM_SMTP_OPENSSL_VERIFY_MODE=""
 # Enable the usage of the devise ichain plugin
 OSEM_ICHAIN_ENABLED=false
 
+# enable this to force SSL
+# FORCE_SSL="1"
+
 # ReCAPTCHA keys
 RECAPTCHA_SITE_KEY=""
 RECAPTCHA_SECRET_KEY=""