I run a website where photography enthusiasts frequently share their works, and I want to disable all image compression while enabling metadata stripping. I have made the following adjustments: I set max image size to 40MB, set max image megapixels to the maximum allowed value of 150 MP, and disabled composer media optimization image. I also adjusted the Nginx settings in the container. Simply put, I added client_header_timeout 1m; client_body_timeout 1m; proxy_connect_timeout 30s; proxy_read_timeout 1m; proxy_send_timeout 1m; and modified # maximum file upload size (keep up to date when changing the corresponding site setting) client_max_body_size 200m ; In server{} in /etc/nginx/nginx.conf. Added client_max_body_size 200m; client_header_timeout 1m; client_body_timeout 1m; proxy_connect_timeout 60s; proxy_read_timeout 1m; proxy_send_timeout 1m; in http{} in /etc/nginx/nginx.conf Here are the configurations for /etc/nginx/nginx.conf and /etc/nginx/conf.d/discourse.conf: root@iZj6cgi365ov99veqodfgnZ-app:/var/www/discourse# cat /etc/nginx/nginx.conf user www-data; worker_processes auto; daemon off; include /etc/nginx/modules-enabled/*.conf; events { worker_connections 4000 ; # multi_accept on; } http { client_max_body_size 200m; client_header_timeout 1m; client_body_timeout 1m; proxy_connect_timeout 60s; proxy_read_timeout 1m; proxy_send_timeout 1m; ## # Basic Settings ## sendfile on; tcp_nopush on; types_hash_max_size 2048; # server_tokens off; # server_names_hash_bucket_size 64; # server_name_in_redirect off; include /etc/nginx/mime.types; default_type application/octet-stream; ## # SSL Settings ## ssl_protocols TLSv1 TLSv1.1 TLSv1.2 TLSv1.3; # Dropping SSLv3, ref: POODLE ssl_prefer_server_ciphers on; ## # Logging Settings ## access_log /var/log/nginx/access.log; error_log /var/log/nginx/error.log; ## # Gzip Settings ## gzip on; # gzip_vary on; # gzip_proxied any; # gzip_comp_level 6; # gzip_buffers 16 8k; # gzip_http_version 1.1; # gzip_types text/plain text/css application/json application/javascript text/xml application/xml application/xml+rss text/javascript; ## # Virtual Host Configs ## include /etc/nginx/conf.d/*.conf; include /etc/nginx/sites-enabled/*; } #mail { # # See sample authentication script at: # # http://wiki.nginx.org/ImapAuthenticateWithApachePhpScript # # # auth_http localhost/auth.php; # # pop3_capabilities "TOP" "USER"; # # imap_capabilities "IMAP4rev1" "UIDPLUS"; # # server { # listen localhost:110; # protocol pop3; # proxy on; # } # # server { # listen localhost:143; # protocol imap; # proxy on; # } #} root@iZj6cgi365ov99veqodfgnZ-app:/var/www/discourse# cat /etc/nginx/conf.d/discourse.conf # Additional MIME types that you'd like nginx to handle go in here types { text/csv csv; application/wasm wasm; } upstream discourse { server 127.0.0.1:3000; } # inactive means we keep stuff around for 1440m minutes regardless of last access (1 week) # levels means it is a 2 deep hierarchy cause we can have lots of files # max_size limits the size of the cache proxy_cache_path /var/nginx/cache inactive=1440m levels=1:2 keys_zone=one:10m max_size=600m; # Increased from the default value to acommodate large cookies during oAuth2 flows # like in https://meta.discourse.org/t/x/74060 and large CSP and Link (preload) headers proxy_buffer_size 32k; proxy_buffers 4 32k; # Increased from the default value to allow for a large volume of cookies in request headers # Discourse itself tries to minimise cookie size, but we cannot control other cookies set by other tools on the same domain. large_client_header_buffers 4 32k; # If you are going to use Puma, use these: # # upstream discourse { # server unix:/var/www/discourse/tmp/sockets/puma.sock; # } # attempt to preserve the proto, must be in http context map $http_x_forwarded_proto $thescheme { default $scheme; "~https$" https; } log_format log_discourse '[$time_local] "$http_host" $remote_addr "$request" "$http_user_agent" "$sent_http_x_discourse_route" $status $bytes_sent "$http_referer" $upstream_response_time $request_time "$upstream_http_x_discourse_username" "$upstream_http_x_discourse_trackview" "$upstream_http_x_queue_time" "$upstream_http_x_redis_calls" "$upstream_http_x_redis_time" "$upstream_http_x_sql_calls" "$upstream_http_x_sql_time"'; # Allow bypass cache from localhost geo $bypass_cache { default 0; 127.0.0.1 1; ::1 1; } limit_req_zone $binary_remote_addr zone=flood:10m rate=12r/s; limit_req_zone $binary_remote_addr zone=bot:10m rate=200r/m; limit_req_status 429; limit_conn_zone $binary_remote_addr zone=connperip:10m; limit_conn_status 429; server { listen 80; return 301 https://kongjiang.org$request_uri; } server { access_log /var/log/nginx/access.log log_discourse; listen 443 ssl http2; listen [::]:443 ssl http2; client_header_timeout 1m; client_body_timeout 1m; proxy_connect_timeout 30s; proxy_read_timeout 1m; proxy_send_timeout 1m; ssl_protocols TLSv1.2 TLSv1.3; ssl_ciphers ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384; ssl_prefer_server_ciphers off; ssl_certificate /shared/ssl/kongjiang.org.cer; ssl_certificate /shared/ssl/kongjiang.org_ecc.cer; ssl_certificate_key /shared/ssl/kongjiang.org.key; ssl_certificate_key /shared/ssl/kongjiang.org_ecc.key; ssl_session_tickets off; ssl_session_timeout 1d; ssl_session_cache shared:SSL:1m; gzip on; add_header Strict-Transport-Security 'max-age=63072000'; if ($http_host != kongjiang.org) { rewrite (.*) https://kongjiang.org$1 permanent; } gzip_vary on; gzip_min_length 1000; gzip_comp_level 5; gzip_types application/json text/css text/javascript application/x-javascript application/javascript image/svg+xml application/wasm; gzip_proxied any; # Uncomment and configure this section for HTTPS support # NOTE: Put your ssl cert in your main nginx config directory (/etc/nginx) # # rewrite ^/(.*) https://enter.your.web.hostname.here/$1 permanent; # # listen 443 ssl; # ssl_certificate your-hostname-cert.pem; # ssl_certificate_key your-hostname-cert.key; # ssl_protocols TLSv1 TLSv1.1 TLSv1.2; # ssl_ciphers HIGH:!aNULL:!MD5; # server_name _ ; server_tokens off; sendfile on; keepalive_timeout 65; # maximum file upload size (keep up to date when changing the corresponding site setting) client_max_body_size 200m ; # path to discourse's public directory set $public /var/www/discourse/public; # without weak etags we get zero benefit from etags on dynamically compressed content # further more etags are based on the file in nginx not sha of data # use dates, it solves the problem fine even cross server etag off; # prevent direct download of backups location ^~ /backups/ { internal; } # bypass rails stack with a cheap 204 for favicon.ico requests location /favicon.ico { return 204; access_log off; log_not_found off; } location / { root $public; add_header ETag ""; # auth_basic on; # auth_basic_user_file /etc/nginx/htpasswd; location ~ ^/uploads/short-url/ { proxy_set_header Host $http_host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Request-Start "t=${msec}"; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header X-Forwarded-Proto $thescheme; proxy_pass http://discourse; break; } location ~ ^/(secure-media-uploads/|secure-uploads)/ { proxy_set_header Host $http_host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Request-Start "t=${msec}"; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header X-Forwarded-Proto $thescheme; proxy_pass http://discourse; break; } location ~* (fonts|assets|plugins|uploads)/.*\.(eot|ttf|woff|woff2|ico|otf)$ { expires 1y; add_header Cache-Control public,immutable; add_header Access-Control-Allow-Origin *; } location = /srv/status { access_log off; log_not_found off; proxy_set_header Host $http_host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Request-Start "t=${msec}"; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header X-Forwarded-Proto $thescheme; proxy_pass http://discourse; break; } # some minimal caching here so we don't keep asking # longer term we should increase probably to 1y location ~ ^/javascripts/ { expires 1d; add_header Cache-Control public,immutable; add_header Access-Control-Allow-Origin *; } location ~ ^/assets/(? .+)$ { expires 1y; # asset pipeline enables this brotli_static on; gzip_static on; add_header Cache-Control public,immutable; # HOOK in asset location (used for extensibility) # TODO I don't think this break is needed, it just breaks out of rewrite break; } location ~ ^/plugins/ { expires 1y; add_header Cache-Control public,immutable; add_header Access-Control-Allow-Origin *; } # cache emojis location ~ /images/emoji/ { expires 1y; add_header Cache-Control public,immutable; add_header Access-Control-Allow-Origin *; } location ~ ^/uploads/ { # NOTE: it is really annoying that we can't just define headers # at the top level and inherit. # # proxy_set_header DOES NOT inherit, by design, we must repeat it, # otherwise headers are not set correctly proxy_set_header Host $http_host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Request-Start "t=${msec}"; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header X-Forwarded-Proto $thescheme; proxy_set_header X-Sendfile-Type X-Accel-Redirect; proxy_set_header X-Accel-Mapping $public/=/downloads/; expires 1y; add_header Cache-Control public,immutable; ## optional upload anti-hotlinking rules #valid_referers none blocked mysite.com *.mysite.com; #if ($invalid_referer) { return 403; } # custom CSS location ~ /stylesheet-cache/ { add_header Access-Control-Allow-Origin *; try_files $uri =404; } # this allows us to bypass rails location ~* \.(gif|png|jpg|jpeg|bmp|tif|tiff|ico||avif)$ { add_header Access-Control-Allow-Origin *; try_files $uri =404; } # SVG needs an extra header attached location ~* \.(svg)$ { } # thumbnails & optimized images location ~ /_?optimized/ { add_header Access-Control-Allow-Origin *; try_files $uri =404; } proxy_pass http://discourse; break; } location ~ ^/admin/backups/ { proxy_set_header Host $http_host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Request-Start "t=${msec}"; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header X-Forwarded-Proto $thescheme; proxy_set_header X-Sendfile-Type X-Accel-Redirect; proxy_set_header X-Accel-Mapping $public/=/downloads/; proxy_pass http://discourse; break; } # This big block is needed so we can selectively enable # acceleration for backups, avatars, sprites and so on. # see note about repetition above location ~ ^/(svg-sprite/|letter_avatar/|letter_avatar_proxy/|user_avatar|highlight-js|stylesheets|theme-javascripts|favicon/proxied|service-worker) { proxy_set_header Host $http_host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Request-Start "t=${msec}"; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header X-Forwarded-Proto $thescheme; # if Set-Cookie is in the response nothing gets cached # this is double bad cause we are not passing last modified in proxy_ignore_headers "Set-Cookie"; proxy_hide_header "Set-Cookie"; proxy_hide_header "X-Discourse-Username"; proxy_hide_header "X-Runtime"; # note x-accel-redirect can not be used with proxy_cache proxy_cache one; proxy_cache_key "$scheme,$host,$request_uri"; proxy_cache_valid 200 301 302 7d; proxy_cache_bypass $bypass_cache; proxy_pass http://discourse; break; } # we need buffering off for message bus location /message-bus/ { proxy_set_header X-Request-Start "t=${msec}"; proxy_set_header Host $http_host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header X-Forwarded-Proto $thescheme; proxy_http_version 1.1; proxy_buffering off; proxy_pass http://discourse; break; } # this means every file in public is tried first try_files $uri @discourse; } location /downloads/ { internal; alias $public/; } location @discourse { add_header Strict-Transport-Security 'max-age=31536000'; # remember the certificate for a year and automatically connect to HTTPS for this domain limit_conn connperip 20; limit_req zone=flood burst=12 nodelay; limit_req zone=bot burst=100 nodelay; proxy_set_header Host $http_host; proxy_set_header X-Request-Start "t=${msec}"; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header X-Forwarded-Proto $thescheme; proxy_pass http://discourse; } } Despite these changes, I still receive a “file too large” error when uploading images larger than 15MB, and with composer media optimization image disabled, the images fail to upload. Could someone guide me on what other settings I should adjust or if there is an issue with my Nginx configuration? I am new to Nginx and have relied entirely on Google and ChatGPT for these modifications.

[תמונה] tumbleweed: Despite these changes, I still receive a “file too large” error when uploading images larger than 15MB, and with composer media optimization image disabled, the images fail to upload It seems like you’re trying to solve two problems at once? Disabling image compression is done by changing Admin - Settings - Files - recompress original jpg quality to 100. The other issue is about upload file size. [תמונה] tumbleweed: still receive a “file too large” error when uploading images larger than 15MB Can you please post the exact error? [תמונה] tumbleweed: with composer media optimization image disabled Does it work with this setting enabled?

you have to change the nginx config client_max_body_size value inside discourse docker as well

איך לבטל דחיסת תמונות

תמיכה

tumbleweed 21 ביוני,‏ 2024,‏ 11:20am 2

Hello… Anyone could help please?

נושא		תגובות	צפיות
How to increase the upload file size limit? Error shown Product Support	2	210	24 באוקטובר,‏ 2024
Upload_size in app.yml not working Product Support	29	3861	12 בפברואר,‏ 2019
Image upload size/resize question Product Support	24	6345	4 באפריל,‏ 2021
Resizing images after upload settings Self-hosting	25	5333	17 באפריל,‏ 2022
Image Uploading Size Show Exceeding Though It's Less Product Support	3	1295	12 בינואר,‏ 2020

איך לבטל דחיסת תמונות

נושאים קשורים