The application must agree with the server.
WHY IT MATTERS
Applications generate links and redirects from their configured site address. If that is still http while the server forces https, the two fight, producing loops, mixed content or broken links.
IN WORDPRESS
Settings > General. Set both WordPress Address and Site Address to the https form. Save.
If those fields are greyed out, they are defined in wp-config.php. Edit them there instead.
IN OTHER APPLICATIONS
- Laravel: APP_URL in
.env - Joomla and Drupal: their respective configuration files or admin settings
- Custom applications: wherever the base URL is defined
AFTERWARDS
Clear all caches, including any caching plugin, Cloudflare, and your browser. Re-save permalinks in WordPress, which regenerates rewrite rules. Check for mixed content.
IF YOU ARE LOCKED OUT AFTER CHANGING IT
Edit wp-config.php and define WP_HOME and WP_SITEURL explicitly with the correct https values. That overrides the database.
