I tried googling or searching but couldn’t find it. When I type a domain name such as discourse.org in a sentence, this becomes a link. This is a HTTP link: [image] Is there any way to make this HTTPS by default? I’m trying to get rid of mixed content errors without manually turning these into HTTP links.

There is a force_https site setting. It’s enabled by default on a standard install.

Is it not enabled here then? Even the direct link to meta.discourse.org is an HTTP link here. I will verify if this is true on other forums.

From what I see in the code, force_https is false by default. config/site_settings.yml main area: "posts_and_topics" review_every_post:

The force_https site setting is missing here. From what I read here: [image] Set up HTTPS support with Let's Encrypt Self-Hosting bookmark This is a guide for enabling HTTPS on an existing Discourse installation using Let’s Encrypt. It assumes prior installation without HTTPS enabled. person_raising_hand Required user level: System Administrator exclamation This guide is only for existing installs where HTTPS is not enabled. Following the official setup guide automatically enables HTTPS by default. So you’d like to add https to your Discourse absolutely free, courtesy of our friends at Let’s Encrypt? bell I… This happens because HTTPS is enabled. I use Let’s encrypt. It seems that by default, text links are HTTP and you can’t change this. If you add it on a new line, it becomes a HTTPS link. For example: [image] One platform. Any community. Discourse is the customizable, scalable community platform powering more than 22,000 communities that create knowledge through conversation.

Just confirmed, links posted like this use http, even when force-https is on.

[image] Rene Molenaar: If you add it on a new line, it becomes a HTTPS link I could be wrong, but I assume that’d be because the oneboxer follows all redirects when placed like that, where it doesn’t for on-line links.

So, the big question is…can we change this behavior? HTTPS is pretty much the default nowadays: Usage Statistics of Default protocol https for Websites, June 2026 How many websites are using Default protocol https

The discourse.org or meta.discourse.org are watched words replaced automatically by links. Maybe it doesn’t use https links there. :thinking:

I don’t believe that is true, the same behavior is exhibited on, say, google.com and apple.com for a few quick examples. To me, it seems like inline links without a protocol just default back to http. (so https://google.com works for example)

Make auto-linked URLs use HTTPS

Product Support

pfaffman (Jay Pfaffman) November 18, 2023, 12:01am 16

I think you can use watched words to replace the bare hostname with the url

Topic		Replies	Views
Discourse not aware of SSL termination (mixed content) Self-hosting	7	2101	August 8, 2019
Discourse always generates links to itself with http: rather than https: Product Support	3	733	December 10, 2018
Outgoing partial links -> https (on the fly)? - NOT http Self-hosting	6	413	January 15, 2024
Changing force_https does not update the url of uploaded images causing a mixed content warning Bug	7	1674	December 14, 2020
How to change email base_url to use "https://"? Product Support	4	877	October 1, 2020

Make auto-linked URLs use HTTPS

Related topics