Allow access only for a specific domain

[thangisme]

I'd like to allow access from my custom domain, but not only the herokuapp.com subdomain. Can you implement this?

[davidjameshowell]

@thangisme This would require a custom SSL certificate to be applied to the application. If I recall correctly, this does require a paid dyno tier in order to use custom SSL domain. If you find this can be done for free and with a LE certificate (or ZeroSSL), I can definitely look into it.

[monolithonadmin]

@thangisme you can add the domain to your Heroku app and you have to point your domain to a Heroku's name record.
If you use Cloudflare (for free), then you can use flexible SSL for your domain and in this case, you can use your own domain with HTTPS on the free Heroku plan.