diff --git a/apecs/settings/prod.py b/apecs/settings/prod.py
index b4ce204..078cfcf 100644
--- a/apecs/settings/prod.py
+++ b/apecs/settings/prod.py
@@ -17,6 +17,9 @@
         "The 'APECS_ALLOWED_HOSTS' environment variable has to be specified"
     )
 
+PREFERRED_SCHEME = "https"
+CSRF_TRUSTED_ORIGINS = [f"{PREFERRED_SCHEME}://{host}" for host in ALLOWED_HOSTS]
+
 DATABASES = {
     "default": {
         "ENGINE": "django.db.backends.postgresql",