Discourse HA Local Install - Certificate Problem

Product Support Self-hosting

AI-generated summary

In a discussion titled “Discourse HA Local Install - Certificate Problem” regarding an unsupported self-hosted setup, user Octoberon describes an experimental configuration using two Ubuntu VMs for Discourse and HAProxy, plus a fourth for Postgres/Redis. Since the servers are not internet-accessible, pfaffman advises that Discourse cannot generate certificates and suggests obtaining them externally to configure HAProxy directly. pfaffman further recommends removing SSL and Let’s Encrypt templates from Discourse and forcing HTTPS manually. Octoberon confirms they created certificates manually but have not yet configured HAProxy. In response, pfaffman points out that without the HAProxy setup, the original question regarding certificate errors appears unclear.

1

I’ve been trying to install an experimental setup with two Ubuntu VMs to run Discourse, an HAProxy server and a fourth one for Postgres/Redis. The servers are not accessible from the internet - it’s just a test system.

The Discourse installation completes but I’m getting stuck with the certs. I’ve got two self-signed certs but I’m clearly doing someting wrong as I keep getting NGINX errors related to finding (or not) the certs when I try to access the site.

Has anyone else run Discourse in this way and able to explain how to get things working with the certificates? I’m obviously missing something so this is a call for education, or confirmation that this whole set-up isn’t viable in the first place.

2

If the server isn’t accessible from the internet then you can’t use discourse to get the certs. You’ll need to get them some other way, and get haproxy to handle the certs.

You’ll need to head to a haproxy site for info on how to do that.

On the discourse side, you’ll remove the ssl and let’s encrypt templates and make sure that you set force_https somewhere.

3

I created the certs manually but I haven’t got as far as setting up HAProxy yet. That may be another hurdle to overcome. I’ll do some more experimenting.

Thanks.

4

Then I don’t understand your question or your title.