# Domain security keeps changing
**URL:** https://meta.discourse.org/t/domain-security-keeps-changing/118336
**Category:** Support
**Created:** [May 21, 2019, 8:28pm UTC](https://meta.discourse.org/t/domain-security-keeps-changing/118336 "2019-05-21T20:28:40Z")
**Posts on this page:** 19
**Page:** 1
### Author:  [@calebs](https://meta.discourse.org/u/calebs)
#### Post date: [May 21, 2019, 8:28pm UTC](https://meta.discourse.org/t/domain-security-keeps-changing/118336/1 "2019-05-21T20:28:40Z")
Hi again. After a few hours, I finally managed to set things up and the forum is working perfectly now, except the privacy status of the domain. It was secure for a while using **Let’s Encrypt** , however it keeps going back to **Your connection is not private** from time to time and then secure again. Is there something with DigitalOcean I’m missing?
And one more thing, I found an available pack for my language, however some of the translations are ridiculous. My question is, if I customize some of the texts, will I lose these customizations if they update the language pack in the future? I’m changing all bot messages one by one and don’t want to lose any of that.
Thanks
---
### Author:  [@jomaxro](https://meta.discourse.org/u/jomaxro)
#### Post date: [May 21, 2019, 8:30pm UTC](https://meta.discourse.org/t/domain-security-keeps-changing/118336/2 "2019-05-21T20:30:55Z")
> [@calebs](#):
>
> however it keeps going back to **Your connection is not private** from time to time and then secure again
Can you be more specific here? Does it become secure again without any action on your part? Or do you do something to make it secure again?
> [@calebs](#):
>
> however some of the translations are ridiculous
Updates to the translations will not override local customizations. That said, if you’re updating the translations, you may also wish to update them at [https://www.transifex.com/discourse](https://www.transifex.com/discourse), so that all users of the language will benefit.
---
### Author:  [@calebs](https://meta.discourse.org/u/calebs)
#### Post date: [May 21, 2019, 8:34pm UTC](https://meta.discourse.org/t/domain-security-keeps-changing/118336/3 "2019-05-21T20:34:24Z")
> [@jomaxro](#):
>
> Can you be more specific here? Does it become secure again without any action on your part? Or do you do something to make it secure again?
My forum was secure after the installation and after doing some work on it, I came back an hour later and got the **Your connection is not private** message. Refreshed a few times and it was secure again. Same thing has been occurring for 3 hours now. I’m only editing some of the texts and adding new badges. Haven’t made major changes to the forum.
> [@jomaxro](#):
>
> That said, if you’re updating the translations, you may also wish to update them at [https://www.transifex.com/discourse](https://www.transifex.com/discourse), so that all users of the language will benefit.
Oh, alright. Will do!
PS: I’m very new to DigitalOcean and servers. I always got my SSL provided by a shared hosting. I’ve followed the installation process step by step and it seemed to work. Apart from that, I’m not sure how to access these and get domain security issues fixed.
---
### Author:  [@jomaxro](https://meta.discourse.org/u/jomaxro)
#### Post date: [May 21, 2019, 8:36pm UTC](https://meta.discourse.org/t/domain-security-keeps-changing/118336/4 "2019-05-21T20:36:24Z")
That’s very strange. Have you enabled the `force_https` site setting? It sounds like you’re still able to load the site via HTTP, which would show the “Your connection is not private” warning. Enabling the force\_https site setting will ensure all access to the site is over HTTPS, and thus secure.
---
### Author:  [@calebs](https://meta.discourse.org/u/calebs)
#### Post date: [May 21, 2019, 8:38pm UTC](https://meta.discourse.org/t/domain-security-keeps-changing/118336/5 "2019-05-21T20:38:10Z")
Would you guide me through the process of enabling that setting, please?
---
### Author:  [@jomaxro](https://meta.discourse.org/u/jomaxro)
#### Post date: [May 21, 2019, 8:39pm UTC](https://meta.discourse.org/t/domain-security-keeps-changing/118336/6 "2019-05-21T20:39:11Z")
Sure. On your site, click the hamburger in the top right next to your avatar. Select settings. In the filter field, enter `force_https`. Check the box to enable the setting once it appears.
---
### Author:  [@calebs](https://meta.discourse.org/u/calebs)
#### Post date: [May 21, 2019, 8:46pm UTC](https://meta.discourse.org/t/domain-security-keeps-changing/118336/7 "2019-05-21T20:46:31Z")
Already switched to English, unfortunately not getting that option.
---
### Author:  [@jomaxro](https://meta.discourse.org/u/jomaxro)
#### Post date: [May 21, 2019, 8:49pm UTC](https://meta.discourse.org/t/domain-security-keeps-changing/118336/8 "2019-05-21T20:49:16Z")
Did you install Discourse by following the [official install guide](https://github.com/discourse/discourse/blob/master/docs/INSTALL-cloud.md)? If yes, the site setting is already enabled and hidden.
The warning could be coming from something else, like an insecure image on a page (mixed content warning). The next time your site loads as not private, please open your browser’s development tools and view the console for any errors/warnings. Then share them here.
---
### Author:  [@calebs](https://meta.discourse.org/u/calebs)
#### Post date: [May 21, 2019, 9:21pm UTC](https://meta.discourse.org/t/domain-security-keeps-changing/118336/9 "2019-05-21T21:21:52Z")
Yes, I’ve followed the official guide, after being told not to use a 3rd party one. It just randomly appears and disappears, without taking any action. I haven’t posted any images/content yet.
---
### Author:  [@jomaxro](https://meta.discourse.org/u/jomaxro)
#### Post date: [May 21, 2019, 10:27pm UTC](https://meta.discourse.org/t/domain-security-keeps-changing/118336/10 "2019-05-21T22:27:55Z")
It’s hard to say. If the official guide was followed, Let’s Encrypt was enabled by entering an email at the specified time during `./discourse-setup`, and you haven’t uploaded any images/content, this should not be occurring. Are you able to link to your site?
---
### Author:  [@jomaxro](https://meta.discourse.org/u/jomaxro)
#### Post date: [May 22, 2019, 3:58pm UTC](https://meta.discourse.org/t/domain-security-keeps-changing/118336/11 "2019-05-22T15:58:48Z")
Thanks for the link. At the moment I can’t access the site, perhaps due to [https://meta.discourse.org/t/plugin-installation-went-wrong/118422](https://meta.discourse.org/t/plugin-installation-went-wrong/118422)? Selecting a droplet with a small amount of memory should not cause the site to crash, assuming swap was enabled on the server (discourse-setup will do this for you). I can try to continue looking once the site is back up.
---
### Author:  [@calebs](https://meta.discourse.org/u/calebs)
#### Post date: [May 22, 2019, 4:03pm UTC](https://meta.discourse.org/t/domain-security-keeps-changing/118336/13 "2019-05-22T16:03:40Z")
Oh, late reply. We already fixed all the issues. Everything worked perfectly fine, until we tried to install a plugin a few minutes ago.
---
### Author:  [@calebs](https://meta.discourse.org/u/calebs)
#### Post date: [May 22, 2019, 4:05pm UTC](https://meta.discourse.org/t/domain-security-keeps-changing/118336/14 "2019-05-22T16:05:44Z")
Not sure about the **haven’t uploaded any images/content** part. Would that cause issues and why?
---
### Author:  [@jomaxro](https://meta.discourse.org/u/jomaxro)
#### Post date: [May 22, 2019, 4:19pm UTC](https://meta.discourse.org/t/domain-security-keeps-changing/118336/15 "2019-05-22T16:19:16Z")
The reason I asked about uploaded images is because they’re the most common cause of mixed content warnings, which is my current theory of why you’re seeing the not private warning.
I was able to load your site successfully, and am not seeing “connection not private” warnings. I’ll browse around a bit and see if I can reproduce this.
---
### Author:  [@calebs](https://meta.discourse.org/u/calebs)
#### Post date: [May 22, 2019, 4:22pm UTC](https://meta.discourse.org/t/domain-security-keeps-changing/118336/16 "2019-05-22T16:22:02Z")
Yes, these were issues from yesterday. We already fixed all that, as well as emails going to spam folders.
I just managed to remove to the pluginI added and site is up and running again. Sorry for the confusion. Also, how do we make sure we won’t have issues with future content posted by users?
---
### Author:  [@jomaxro](https://meta.discourse.org/u/jomaxro)
#### Post date: [May 22, 2019, 4:24pm UTC](https://meta.discourse.org/t/domain-security-keeps-changing/118336/17 "2019-05-22T16:24:09Z")
Great, glad that everything is working now. I was just about to reply back saying I’d opened every category page and couldn’t reproduce this.
> [@calebs](#):
>
> Also, how do we make sure we won’t have issues with future content posted by users?
You shouldn’t have to do anything. The only thing to check is that the `download remote images to local` site setting is enabled (it is by default). This ensures that ff users link to external content, even if that content is insecure, it’ll be downloaded by your site so it can be served securely.
---
### Author:  [@calebs](https://meta.discourse.org/u/calebs)
#### Post date: [May 22, 2019, 4:26pm UTC](https://meta.discourse.org/t/domain-security-keeps-changing/118336/18 "2019-05-22T16:26:46Z")
Thank you a lot, Joshua! I’ll continue updating the site and adding content now. Hopefully everything goes well. Have a good day! 🙂
---
### Author:  [@calebs](https://meta.discourse.org/u/calebs)
#### Post date: [May 29, 2019, 8:38am UTC](https://meta.discourse.org/t/domain-security-keeps-changing/118336/19 "2019-05-29T08:38:41Z")
Hey Joshua! Could you please take a look at [this](https://meta.discourse.org/t/latest-topics-section-only-shows-topics-by-admins/118902/) issue? Sadly, I haven’t received an answer yet and couldn’t find previous topics based on this. Thanks!
---
### Author:  [@jomaxro](https://meta.discourse.org/u/jomaxro)
#### Post date: [June 1, 2019, 8:38am UTC](https://meta.discourse.org/t/domain-security-keeps-changing/118336/20 "2019-06-01T08:38:43Z")
This topic was automatically closed 3 days after the last reply. New replies are no longer allowed.