Editing Simplified HTTPS Configuration (section)

== Configurations ==
'''Make sure you remove or disable your archive's <code>cfg/cfg.d/https.pl</code> if it exists as it may override the configuration below.  Once you have updated your configuration you must run <code>generate_apacheconf</code> to regenerate configuration for Apache before restarting the web server.'''

=== HTTP Only ===
It is advised you avoid using this configuration unless you are developing a repository on a non-publicly accessible web host.
 $c->{host} = 'example.eprints.org';
 $c->{port} = 80;
 $c->{securehost} = undef;
 $c->{secureport} = undef;

=== HTTPS When You Login ===
This is the current default for EPrints.  All publicly accessible pages will use HTTP by default (but still be accessible over HTTPS if you modify the URL) and the login page and all login restricted pages will use HTTPS or be redirected from HTTP.
 $c->{host} = 'example.eprints.org';
 $c->{port} = 80;
 $c->{securehost} = $c->{host};
 $c->{secureport} = 443;

=== HTTPS Only ===
This ensures that no page (image, CSS, JavaScript file, etc.) will be returned over HTTP and if requested it will be redirected to HTTPS.

You may also want to edit the archive's <code>ssl/securevhost.conf</code> to add the [[HTTPS-only_and_HSTS#Add_the_HSTS_header | HSTS header]].
 $c->{host} = undef;
 $c->{port} = 80;
 $c->{securehost} = 'example.eprints.org';
 $c->{secureport} = 443;