diff --git a/app.json b/app.json
index 3e8fe4a7..7c43a3da 100644
--- a/app.json
+++ b/app.json
@@ -143,6 +143,10 @@
         "CMD_ALLOW_PDF_EXPORT": {
             "description": "Enable or disable PDF exports",
             "required": false
+        },
+        "PGSSLMODE": {
+          "description": "Enforce PG SSL mode",
+          "value": "require"
         }
     },
     "addons": [
diff --git a/package.json b/package.json
index cf804f58..3fa721c6 100644
--- a/package.json
+++ b/package.json
@@ -27,7 +27,7 @@
     "coverage:ci": "nyc mocha --no-color -R dot --require intelli-espower-loader --exit --recursive ./test",
     "test": "npm run-script lint && npm run-script jsonlint && npm run-script coverage",
     "test:ci": "npm run-script lint && npm run-script jsonlint && npm run-script coverage:ci",
-    "postinstall": "bin/heroku"
+    "heroku-postbuild": "npm run build && ./bin/heroku"
   },
   "dependencies": {
     "@aws-sdk/client-s3-node": "0.1.0-preview.2",