Special Topics

HTTPS (TLS)

All Berkeley sites hosted on Pantheon should be served over HTTPS for improved security and search engine optimization. Pantheon provides free, shared HTTPS certificates via Let's Encrypt.

To set up HTTPS for a new Pantheon site

To add a new domain to your Pantheon site, fill out the Upgrade to Paid Plan form (if this site is not yet using a paid plan) and request the appropriate plan for the particular site.

Moving your Domain from one Pantheon Site to Another

If you are moving a domain from one Pantheon site to another, you do not need to register for CalNet or fill out the Offsite Hosting form again.

Redirecting a Domain to a Sub-Site of an Existing Pantheon Drupal site

If you have a domain that you want to point to a subdirectory of another Pantheon site - for example, if you have an existing site at site1.berkeley.edu and want to serve it instead from site2.berkeley.edu/site1 - this can be done on Pantheon.

Redirecting Multiple Domains to the same Pantheon Drupal site

Many websites are available at more than one domain. If you want to point multiple domains to your Pantheon site, we recommend choosing one primary domain and redirecting the rest to it. This will improve your search engine rankings, as Google et al. penalize you for duplicate content at different addresses.

Configuring DNS for your Live Website

CNAME vs. A Record

For most sites, creating a CNAME is not an issue. In a few cases, it is not possible for a website to use a CNAME. Some examples are if you are running a mail server at that domain or if you have subdomains of that domain. If you think this might be the case, please check with your department IT staff. Otherwise, Hostmaster will notify you if there are any problems when you submit your offsite hosting request.

Giving Vendors and Collaborators Access to Your Site

Web Platform Services strongly recommends using CalNet authentication for all sites. If you are working with a third-party vendor or collaborator who needs to be able to log in to your site, they can get an Affiliate or Guest account. Once the account is set up, they will be able to log in using CalNet authentication.

Using SSH Keys

Using an SSH key is more convenient than typing your dashboard password every time you issue a Git command on a Pantheon site. If you have multiple SSH keys for different purposes and want to tell all of your Pantheon sites to use a specific key, you can configure your local ssh setup to use one key for all Pantheon servers.

Special Topics for Pantheon Sites

The pages in this section outline various Special Topics related to hosting a site on Pantheon's infrastructure. See the links in the side menu for more information.

Working within Security Restrictions on your Computer

Site managers who work in highly-sensitive campus units may not be able to connect via Git, SSH, drush, or SFTP to outside services due to security restrictions. Pantheon is unable to provide fixed IP addresses, so it is not possible to add firewall exceptions for individual sites.

Other site managers may not be able to install the required software clients on their computers.

In either case, you can still accomplish the most common development tasks using the Pantheon dashboard and the Drupal site interface in your browser.

Creating a New Release of your Site

At some point you may wish to redevelop your Pantheon site. You can take advantage of Pantheon's multiple environments by doing your new work in the dev environment. However, you will not be able to apply updates to your live site without also pushing up all of your new code.

You can also create a new dev site and do all of your development independently. You can start from scratch or start by exporting your old site and importing it to create the new one.

Experienced developers might be interested in Pantheon's multidev feature, which allows multiple development branches.