# Discourse instance unreachable on AWS

**URL:** https://meta.discourse.org/t/discourse-instance-unreachable-on-aws/55006
**Category:** Support
**Created:** [December 31, 2016, 4:40pm UTC](https://meta.discourse.org/t/discourse-instance-unreachable-on-aws/55006 "2016-12-31T16:40:30Z")
**Posts on this page:** 10
**Page:** 2

<div class="post-metadata">

### Author: ![CaptainChemist](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/captainchemist/32/121252_2.png) [@CaptainChemist](https://meta.discourse.org/u/CaptainChemist)
#### Post date: [February 6, 2017, 5:31pm UTC](https://meta.discourse.org/t/discourse-instance-unreachable-on-aws/55006/21 "2017-02-06T17:31:46Z")

</div>

Thanks for this thread, I am running into the exact same issue. Did you end up figuring it out? I have my security settings set exactly like Auryn’s but I still cannot connect to the discourse server even though it seems to be running fine in Ubuntu 16.

---

<div class="post-metadata">

### Author: ![DanielMarquard](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/danielmarquard/32/74010_2.png) [@DanielMarquard](https://meta.discourse.org/u/DanielMarquard)
#### Post date: [February 6, 2017, 5:38pm UTC](https://meta.discourse.org/t/discourse-instance-unreachable-on-aws/55006/22 "2017-02-06T17:38:20Z")

</div>

I think the cause was with Nginx failing to locate the SSL certificate, because one was not generated by Let’s Encrypt due to the hostname not resolving to that server.

Have you tried the troubleshooting steps I posted above?

---

<div class="post-metadata">

### Author: ![CaptainChemist](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/captainchemist/32/121252_2.png) [@CaptainChemist](https://meta.discourse.org/u/CaptainChemist)
#### Post date: [February 6, 2017, 5:52pm UTC](https://meta.discourse.org/t/discourse-instance-unreachable-on-aws/55006/23 "2017-02-06T17:52:10Z")

</div>

I tried most of the steps, let me recap:  
`telnet IPADDRESS 80`  
`telnet IPADDRESS 443`

both give back ‘unable to connect’ messages. I can ssh in with no issues. My security groups match what was suggested:

 ![](https://global.discourse-cdn.com/meta/original/3X/2/7/273c9492bb795530f60c3fa65c09df570aa14302.png)  
[The outbound side is the default which is all](http://imgur.com/a/1gRt8)

Running `ps aux | grep -i nginx` gives:

`root 7288 0.0 0.0 4244 1152 ? Ss 16:22 0:03 runsv nginx ubuntu 19278 0.0 0.0 12944 888 pts/2 S+ 17:42 0:00 grep --color=auto -i nginx`

Running telnet localhost 443

`Trying 127.0.0.1... Connected to localhost. Escape character is '^]'. Connection closed by foreign host.`

My ufw is disabled

I wonder if the problem is a similar one with let’s encrypt. I use name cheap as my domain provider and I added:  
Type: A Record  
Host: community  
IP: IPADDRESS  
TTL: 1 minute

My error when I go to my [community.domain.com](http://community.domain.com) does appear to be the same as IPADDRESS through a web browser. That should be all that is needed on the namecheap side, right? If I go to an IP checker website, it does correctly point from [community.mydomain.com](http://community.mydomain.com) to the right AWS Elastic IP. Thanks again!

---

<div class="post-metadata">

### Author: ![CaptainChemist](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/captainchemist/32/121252_2.png) [@CaptainChemist](https://meta.discourse.org/u/CaptainChemist)
#### Post date: [February 6, 2017, 6:26pm UTC](https://meta.discourse.org/t/discourse-instance-unreachable-on-aws/55006/24 "2017-02-06T18:26:33Z")

</div>

Ha, I got it! Your tip about let’s encrypt was correct. Once I reran the set up after namecheap had a chance to point from my domain to my IP address, everything worked perfectly.

Thanks again!

---

<div class="post-metadata">

### Author: ![auryn\_macmillan](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/auryn_macmillan/32/56633_2.png) [@auryn\_macmillan](https://meta.discourse.org/u/auryn_macmillan)
#### Post date: [February 6, 2017, 11:45pm UTC](https://meta.discourse.org/t/discourse-instance-unreachable-on-aws/55006/25 "2017-02-06T23:45:24Z")

</div>

Oh crap, is that all it was! lol. I still hadn’t fixed this (sorry for dropping off the map @DanielMarquard, got busy with other stuff).

Will have a crack at it tonight.

---

<div class="post-metadata">

### Author: ![CaptainChemist](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/captainchemist/32/121252_2.png) [@CaptainChemist](https://meta.discourse.org/u/CaptainChemist)
#### Post date: [February 7, 2017, 12:12am UTC](https://meta.discourse.org/t/discourse-instance-unreachable-on-aws/55006/26 "2017-02-07T00:12:29Z")

</div>

@auryn_macmillan haha your response is amazing! 🙂 Two other errors that I had to deal with just in case you run into it too, is that with the automatic setup , the `DISCOURSE_SMTP_PASSWORD` is put in quotes automatically while other variables in that block do not have the quotes. I removed those quotes to match.

Also, my admin email was [admin@mydomain.com](mailto:admin@mydomain.com), while discourse by default expects in my case [admin@community.mydomain.com](mailto:admin@community.mydomain.com) (based on `DISCOURSE_HOSTNAME`). If you go down to the second to last line you can uncomment this line and fill in your details:  
`- exec: rails r "SiteSetting.notification_email='admin@mydomain.com'"`

Then when you go to configure the site, it will properly send you the email you need to get started. That step is only necessary if the total domain of your website differs from your email. Good luck and thanks everyone for getting this conversation started.

---

<div class="post-metadata">

### Author: ![DanielMarquard](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/danielmarquard/32/74010_2.png) [@DanielMarquard](https://meta.discourse.org/u/DanielMarquard)
#### Post date: [February 7, 2017, 3:49am UTC](https://meta.discourse.org/t/discourse-instance-unreachable-on-aws/55006/27 "2017-02-07T03:49:12Z")

</div>

> [@CaptainChemist](#):
>
> Ha, I got it! Your tip about let’s encrypt was correct. Once I reran the set up after namecheap had a chance to point from my domain to my IP address, everything worked perfectly.
> 
> Thanks again!

Glad that fixed it for you. 🙂

---

<div class="post-metadata">

### Author: ![auryn\_macmillan](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/auryn_macmillan/32/56633_2.png) [@auryn\_macmillan](https://meta.discourse.org/u/auryn_macmillan)
#### Post date: [February 8, 2017, 12:25am UTC](https://meta.discourse.org/t/discourse-instance-unreachable-on-aws/55006/28 "2017-02-08T00:25:40Z")

</div>

@DanielMarquard & @CaptainChemist thanks for the help! Finally got my server migrated over to AWS and everything seems to be working a treat.

---

<div class="post-metadata">

### Author: ![system](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/system/32/443519_2.png) [@system](https://meta.discourse.org/u/system)
#### Post date: [April 30, 2019, 6:31am UTC](https://meta.discourse.org/t/discourse-instance-unreachable-on-aws/55006/29 "2019-04-30T06:31:01Z")

</div>



---

<div class="post-metadata">

### Author: ![zogstrip](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/zogstrip/32/512781_2.png) [@zogstrip](https://meta.discourse.org/u/zogstrip)
#### Post date: [April 30, 2019, 8:13am UTC](https://meta.discourse.org/t/discourse-instance-unreachable-on-aws/55006/30 "2019-04-30T08:13:02Z")

</div>



[Previous page](https://meta.discourse.org/t/discourse-instance-unreachable-on-aws/55006.md?page=1)
