I keep my forum’s server behind cloud flare due to a large amount of attacks against the site. The link previews and emails can leak the server’s backend IP Address. The email issue was resolved by setting up a SMTP relay that strips headers (if the user pulls email headers to get the IP, they get the relay and not the forum’s IP). Is there a way to make the link previews go through a proxy server?

Ah. Then it is not a discourse issue. It is a network setup issue for your server. Your server needs to set up networking with a proxy. Then anything accessing the network, including discourse, will automatically go thru the proxy.

Yes you will need to set up a proxy for outgoing traffic on your server this has nothing to do with us.

Alright so how do configure Discourse to connect to the proxy? Where do I configure proxy settings. If I could just forward traffic to go through SOCKS localhost:9050 I could route through Tor without an issue.

Your comments are very confusing and doesn’t look like it is related to a proxy at all. A proxy is for OUTGOING traffic. localhost:9050 is INCOMING, unless you mean all your out-going traffic is going out via port 9050. Check careful the answer: You don’t configure Discourse to connect to the proxy. You configure the SERVER to use a proxy for OUTGOING connections.

Provide instructions? Also localhost:9050 exits through Tor.

My suggestion for you is to get a sysadmin person to look at your network setup on the SERVER. Nothing really to do in Discourse here…

[图片] schungx: Nothing really to do in Discourse here… Is has everything to do with discourse, it’s not an unreasonable request to ask where to configure proxy settings. As for sysadmin stuff I’ve never configured a server to exit through a proxy before, it’s site policy to not grant 3rd parties access to SSH.

I see what you’re asking here. The short of it is that Discourse itself has no way to tell it to use a proxy for outbound connections, thought it appears Net::HTTP has the capability to automatically use the http_proxy environment variable, which (in some cases) should serve your needs. I would recommend the following steps: set up an offsite https proxy configure your Discourse server’s firewall to reject (and LOG!) outbound connections from Discourse deploy Discourse with the http_proxy monitor your firewall logs so you can watch for outbound connections you didn’t think of (e.g. DNS) and whitelist them or adapt the section of the code from where it’s called This will probably take some effort to get working, alternatively you could tunnel outbound traffic via a tunnel to an offsite host. Since you already have a SOCKS proxy set up, maybe you can add outbound firewall mangling rules to transparently shunt requests to a squid proxy that then uses SOCKS for outbound requests?

Thank you for sharing this. Would you mind sharing how to set the http_proxy environment variable? I will be configuring Privoxy to forward requests to the Tor Process so outbound traffic is completely anonymous and will not expose my forum’s backend IP Address. Information on setting that environment variable would be great though :slight_smile:

You need to set it in the env section of your instance’s .yml file if using discourse_docker. Otherwise, just set it in your startup script.

Discourse Link previews through a proxy server?

Product Support Self-hosting

codinghorror (Jeff Atwood) 2017 年10 月 26 日 05:42 20

No, this isn’t so. The entire premise of CloudFlare is that it works great against even nation state attacks as long as they DO NOT figure out your real IP.

话题		回复	浏览量
Stop Discourse leaking its Host IP adress when preloading links/ressources Self-hosting	5	230	2026 年3 月 23 日
Reverse proxy for Discourse \| Real IP masking Self-hosting	14	2228	2023 年8 月 19 日
Discourse behind reverse proxy and https Self-hosting	18	7766	2022 年3 月 13 日
Discourse shows server IP/localhost as user's IP Self-hosting unsupported-install	18	2577	2022 年7 月 12 日
Proxying new setup with reverse proxy Self-hosting	1	125	2026 年6 月 30 日

Discourse Link previews through a proxy server?

相关话题