使用 CDN 运行时，S3 中的缩略图出现 403 Forbidden

nodomain · 2023 年4 月 26 日 14:40

我们使用基于 GitHub - aws-samples/aws-cdk-for-discourse: AWS CDK for Discourse 的 AWS 上的官方 Docker 托管设置。

通用的 CDN 设置运行良好，例如图像通过 CDN URL 正常提供。

但是，初始的“32x32”请求似乎指向 S3 存储桶 URL，这会产生 403 错误。

是我错过了某个配置，还是这是一个 bug？

Falco · 2023 年4 月 26 日 17:01

这不是官方的，因为它是一个 AWS 项目，使用了 Bitnami 的 Discourse 镜像，而我们明确不承认这是 Discourse 的官方标准安装，因此不在我们这里支持的安装范围之内。

这不是一个 bug，因为它没有按照我们期望的方式运行应用程序，但通过更改配置或许可以修复。也许可以在该示例存储库上为此打开一个 issue？

nodomain · 2023 年4 月 26 日 19:49

引用的项目使用了官方的 Docker 镜像。

github.com/aws-samples/aws-cdk-for-discourse

lib/ec2-nested-stack.ts

main


      
          userData.addCommands(
              "sudo -s",
              "yum -y update",
              "yum -y install docker",
              "yum -y install git",
              "yum -y install jq",
              "amazon-linux-extras install -y postgresql13",
              "systemctl enable docker.service",
              "systemctl start docker.service",
              "systemctl status docker.service",
              "git clone https://github.com/discourse/discourse_docker.git /var/discourse",
              "cd /var/discourse",
              "chmod 700 containers",
              "aws s3 cp s3://" + props.backupBucket.bucketName + "/app.yml.template ./containers/app.yml.template",
              "aws s3 cp s3://" + props.backupBucket.bucketName + "/smtp_credentials_generate.py ./smtp_credentials_generate.py",
              "echo -e 'export DISCOURSE_DB_USERNAME=$(aws secretsmanager get-secret-value --region " + this.region + " --secret-id " + props.auroraServerlessV2SecretArn + " --query SecretString --output text | jq -r .username)' > discourse-env",
              "echo -e 'export DISCOURSE_DB_PASSWORD=$(aws secretsmanager get-secret-value --region " + this.region + " --secret-id " + props.auroraServerlessV2SecretArn + " --query SecretString --output text | jq -r .password)' >> discourse-env",
              "echo -e 'export DISCOURSE_DB_HOST=$(aws secretsmanager get-secret-value --region " + this.region + " --secret-id " + props.auroraServerlessV2SecretArn + " --query SecretString --output text | jq -r .host)' >> discourse-env",
              "echo -e 'export DISCOURSE_DB_NAME=$(aws secretsmanager get-secret-value --region " + this.region + " --secret-id " + props.auroraServerlessV2SecretArn + " --query SecretString --output text | jq -r .dbname)' >> discourse-env",
              "echo -e 'export DISCOURSE_DB_PORT=$(aws secretsmanager get-secret-value --region " + this.region + " --secret-id " + props.auroraServerlessV2SecretArn + " --query SecretString --output text | jq -r .port)' >> discourse-env",
              "echo -e 'export PGPASSWORD=$(aws secretsmanager get-secret-value --region " + this.region + " --secret-id " + props.auroraServerlessV2SecretArn + " --query SecretString --output text | jq -r .password)' >> discourse-env",

不是 Bitnami - 我一开始也不会使用它

我将深入研究并在此处或那里报告一个问题。

Falco · 2023 年4 月 26 日 20:03

哦，抱歉，我看了项目 README.md 上的内容。

github.com/aws-samples/aws-cdk-for-discourse

README.md?plain=1

main


      
          
          1. [Amazon CloudFront](https://aws.amazon.com/cloudfront/) is used for CDN via S3 and the application load balancer
          2. [Amazon Route 53](https://aws.amazon.com/route53/) holds the hosted zone for DNS management to create verified outbound email domains along with domain certificates
          3. [Amazon S3](https://aws.amazon.com/route53/) holds user upload files and static assets in one bucket along with Discourse backups in another bucket
          4. [AWS Certificate Manager](https://aws.amazon.com/certificate-manager/) is used to create a DNS validated certificate
          5. [AWS Secrets Manager](https://aws.amazon.com/secrets-manager/) holds the initial setup credentials and created database credentials.
          6. [Amazon Cogntio](https://aws.amazon.com/cognito/) user pools are used via OpenID
          7. [Amazon SES](https://aws.amazon.com/ses/) handles outbound email notifications
          8. [AWS Systems Manager](https://aws.amazon.com/systems-manager/) Session Manager is used to connect to internal instances for debugging purposes
          9. [AWS Auto Scaling](https://aws.amazon.com/autoscaling/) will create the desired number of instances in the desired availability zones
          10. [Amazon EC2](https://aws.amazon.com/pm/ec2/) instances are bootstrapped via a user data script which pulls down the latest stable version of Discourse and sets up the app.yml then launches the [Discourse docker image](https://hub.docker.com/r/bitnami/discourse).
          11. [Amazon RDS](https://aws.amazon.com/rds/) Aurora serverless V2 Postgres database stores user details and posts
          12. [Amazon ElastiCache for Redis](https://aws.amazon.com/elasticache/redis/) is used as a caching layer
          
          ## Requirements
          1. Apache Maven 3.8.5 or greater installed
          2. Java 11 or greater installed
          3. <a href="https://aws.amazon.com/cdk/">AWS Cloud Development Kit</a> (CDK) 1.120.0 or higher
          4. Valid docker login credentials
          5. A domain name hosted by Route53 which is used to
              1. Create a subdomain for discourse

祝你好运。如果你发现任何线索，请在此处更新。

nodomain · 2023 年4 月 26 日 20:48

README 的拉取请求即将到来

nodomain · 2023 年4 月 27 日 13:15

我找到了问题。我从另一个系统恢复了备份。

Jagster · 2023 年4 月 27 日 13:47

那么什么坏了？

nodomain · 2023 年4 月 27 日 14:12

不知何故，它使用了 s3 URL 作为默认的 Discourse 系统用户头像图片。我没有花时间修复它，因为我仍在进行一些测试活动，需要定期重新创建环境。

system · 2023 年5 月 27 日 14:12

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.

话题		回复	浏览量
Issues with AWS CDN and S3 Installation cdn , s3	18	71	2025 年12 月 14 日
Unable to setup S3 bucket Installation uploads , s3	11	202	2025 年1 月 12 日
What are the right settings to use S3 bucket (with non-Amazon URL)? Installation	19	4799	2020 年8 月 25 日
User avatars not in S3 but served via discourse_cdn_url Dev	2	500	2020 年8 月 14 日
Want to understand s3_cdn_url files setting Support	7	2719	2016 年6 月 30 日

使用 CDN 运行时，S3 中的缩略图出现 403 Forbidden

相关话题