diff --git a/config/prod.exs b/config/prod.exs
index 34fda3dd..940e53be 100644
--- a/config/prod.exs
+++ b/config/prod.exs
@@ -5,7 +5,12 @@ import Config
 # manifest is generated by the `mix assets.deploy` task,
 # which you should run after static files are built and
 # before starting your production server.
-config :vyasa, VyasaWeb.Endpoint, cache_static_manifest: "priv/static/cache_manifest.json"
+config :vyasa, VyasaWeb.Endpoint,
+  cache_static_manifest: "priv/static/cache_manifest.json",
+  force_ssl: [
+    host: nil,
+    rewrite_on: [:x_forwarded_port, :x_forwarded_proto],
+    hsts: false]
 
 # Configures Swoosh API Client
 config :swoosh, api_client: Swoosh.ApiClient.Finch, finch_name: Vyasa.Finch
diff --git a/config/runtime.exs b/config/runtime.exs
index c0a06fa9..49493441 100644
--- a/config/runtime.exs
+++ b/config/runtime.exs
@@ -63,6 +63,7 @@ if config_env() == :prod do
       ip: {0, 0, 0, 0, 0, 0, 0, 0},
       port: port
     ],
+    check_origin: ["https://vyasa.tv", "https://www.vyasa.tv", "https://vyasa.fly.dev"],
     secret_key_base: secret_key_base
 
   # ## SSL Support