I was able to activate HTTPS in Discourse. I even don’t get the csrf token error any more if I try to login. Thank you @fhe @pfaffman
For future Googlers:
Additional nginx directives
location ~ / {
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto https;
proxy_pass http://localhost:8060;
}
Security
Discourse Settings
force https ← On
app.yml
No changes regarding SSL.
Template Section
## Uncomment these two lines if you wish to add Lets Encrypt (https)
#- "templates/web.ssl.template.yml"
#- "templates/web.letsencrypt.ssl.template.yml"
#- "templates/web.socketed.template.yml"
Expose Section
expose:
- "8060:80" # http
- "9443:443" # https