403 forbidden for thumbnails on s3 when running with CDN

nodomain · April 26, 2023, 7:49pm

The referenced project uses the official Docker image.

github.com/aws-samples/aws-cdk-for-discourse

lib/ec2-nested-stack.ts

main


      
          userData.addCommands(
              "sudo -s",
              "yum -y update",
              "yum -y install docker",
              "yum -y install git",
              "yum -y install jq",
              "amazon-linux-extras install -y postgresql13",
              "systemctl enable docker.service",
              "systemctl start docker.service",
              "systemctl status docker.service",
              "git clone https://github.com/discourse/discourse_docker.git /var/discourse",
              "cd /var/discourse",
              "chmod 700 containers",
              "aws s3 cp s3://" + props.backupBucket.bucketName + "/app.yml.template ./containers/app.yml.template",
              "aws s3 cp s3://" + props.backupBucket.bucketName + "/smtp_credentials_generate.py ./smtp_credentials_generate.py",
              "echo -e 'export DISCOURSE_DB_USERNAME=$(aws secretsmanager get-secret-value --region " + this.region + " --secret-id " + props.auroraServerlessV2SecretArn + " --query SecretString --output text | jq -r .username)' > discourse-env",
              "echo -e 'export DISCOURSE_DB_PASSWORD=$(aws secretsmanager get-secret-value --region " + this.region + " --secret-id " + props.auroraServerlessV2SecretArn + " --query SecretString --output text | jq -r .password)' >> discourse-env",
              "echo -e 'export DISCOURSE_DB_HOST=$(aws secretsmanager get-secret-value --region " + this.region + " --secret-id " + props.auroraServerlessV2SecretArn + " --query SecretString --output text | jq -r .host)' >> discourse-env",
              "echo -e 'export DISCOURSE_DB_NAME=$(aws secretsmanager get-secret-value --region " + this.region + " --secret-id " + props.auroraServerlessV2SecretArn + " --query SecretString --output text | jq -r .dbname)' >> discourse-env",
              "echo -e 'export DISCOURSE_DB_PORT=$(aws secretsmanager get-secret-value --region " + this.region + " --secret-id " + props.auroraServerlessV2SecretArn + " --query SecretString --output text | jq -r .port)' >> discourse-env",
              "echo -e 'export PGPASSWORD=$(aws secretsmanager get-secret-value --region " + this.region + " --secret-id " + props.auroraServerlessV2SecretArn + " --query SecretString --output text | jq -r .password)' >> discourse-env",

No Bitnami - I would not have used that in the first place either

I am going to dig into it and report an issue either there, or here.

Topic		Replies	Views
Issues with AWS CDN and S3 Self-hosting cdn , s3	22	1313	December 30, 2025
Unable to setup S3 bucket Self-hosting uploads , s3	11	726	January 12, 2025
What are the right settings to use S3 bucket (with non-Amazon URL)? Self-hosting	19	5475	August 25, 2020
User avatars not in S3 but served via discourse_cdn_url Development	2	574	August 14, 2020
Want to understand s3_cdn_url files setting Product Support	6	2908	June 27, 2016

403 forbidden for thumbnails on s3 when running with CDN

Related topics