I tried googling or searching but couldn’t find it. When I type a domain name such as discourse.org in a sentence, this becomes a link. This is a HTTP link: [image] Is there any way to make this HTTPS by default? I’m trying to get rid of mixed content errors without manually turning these into HTTP links.

There is a force_https site setting. It’s enabled by default on a standard install.

Is it not enabled here then? Even the direct link to meta.discourse.org is an HTTP link here. I will verify if this is true on other forums.

From what I see in the code, force_https is false by default. config/site_settings.yml main area: "posts_and_topics" review_every_post:

The force_https site setting is missing here. From what I read here: [תמונה] Set up HTTPS support with Let's Encrypt Self-Hosting bookmark This is a guide for enabling HTTPS on an existing Discourse installation using Let’s Encrypt. It assumes prior installation without HTTPS enabled. person_raising_hand Required user level: System Administrator exclamation This guide is only for existing installs where HTTPS is not enabled. Following the official setup guide automatically enables HTTPS by default. So you’d like to add https to your Discourse absolutely free, courtesy of our friends at Let’s Encrypt? bell I… This happens because HTTPS is enabled. I use Let’s encrypt. It seems that by default, text links are HTTP and you can’t change this. If you add it on a new line, it becomes a HTTPS link. For example: [תמונה] One platform. Any community. Discourse is the customizable, scalable community platform powering more than 22,000 communities that create knowledge through conversation.

Just confirmed, links posted like this use http, even when force-https is on.

[תמונה] Rene Molenaar: If you add it on a new line, it becomes a HTTPS link I could be wrong, but I assume that’d be because the oneboxer follows all redirects when placed like that, where it doesn’t for on-line links.

So, the big question is…can we change this behavior? HTTPS is pretty much the default nowadays: Usage Statistics of Default protocol https for Websites, June 2026 How many websites are using Default protocol https

The discourse.org or meta.discourse.org are watched words replaced automatically by links. Maybe it doesn’t use https links there. :thinking:

I don’t believe that is true, the same behavior is exhibited on, say, google.com and apple.com for a few quick examples. To me, it seems like inline links without a protocol just default back to http. (so https://google.com works for example)

הפוך קישורים אוטומטיים להשתמש ב-HTTPS

תמיכה

pfaffman (Jay Pfaffman) 18 בנובמבר,‏ 2023,‏ 12:01am 16

I think you can use watched words to replace the bare hostname with the url

נושא		תגובות	צפיות
Discourse not aware of SSL termination (mixed content) Self-hosting	7	2102	8 באוגוסט,‏ 2019
Discourse always generates links to itself with http: rather than https: Product Support	3	735	10 בדצמבר,‏ 2018
Outgoing partial links -> https (on the fly)? - NOT http Self-hosting	6	414	15 בינואר,‏ 2024
Changing force_https does not update the url of uploaded images causing a mixed content warning Bug	7	1674	14 בדצמבר,‏ 2020
How to change email base_url to use "https://"? Product Support	4	877	1 באוקטובר,‏ 2020

הפוך קישורים אוטומטיים להשתמש ב-HTTPS

נושאים קשורים