Once SSL is active we can enable HTTPS redirect at the web server. In WordPress, set the site URL to https:// and use a redirect plugin only if needed. Mixed-content warnings mean some assets still load over http:// — update those URLs.