How to restart Discourse after server reboot?

[iraszl (Ivan Raszl)]

I have a DO droplet. And I installed discourse with docker as recommended. It was working fine. I also restored Discourse from a backup. Still worked fine. Then, I wanted to restart the server so the new backup takes full effect, and caches clear out. I ssh-d into the droplet and gave the ‘reboot’ command. The server rebooted but the site doesn’t load anymore. White page of death. Do I have to restart Discourse or docker? Please help!

[codinghorror (Jeff Atwood)]

The install isn’t correct as per our official installation guide; docker startup is always automatic if you’ve followed the guide.

If you followed our official install guide closely, without deviating from the install steps, and the install was running prior to restoring the backup, this is more likely some kind of backup restore issue. Are you sure there aren’t any JS errors in the F12 browser console on the “white page of death”?

[iraszl (Ivan Raszl)]

You’re right! There are js errors. Any idea what is wrong? See errors below:

> Refused to load the script '<URL>' because it violates the following Content Security Policy directive: "script-src 'unsafe-eval' 'report-sample' <URL> <URL> <URL> <URL> <URL> <URL> <URL> <URL> <URL> <URL> <URL> <URL> https: 'unsafe-inline'". Note that 'script-src-elem' was not explicitly set, so 'script-src' is used as a fallback.
> 
> www.themefair.com/:25 Refused to load the script 'http://www.themefair.com/assets/locales/en-ed716b03cc4bab12e892d910c3a88c2d69c5f46a1184f73b09390e8cb7dbe602.js' because it violates the following Content Security Policy directive: "script-src 'unsafe-eval' 'report-sample' https://www.themefair.com/logs/ https://www.themefair.com/sidekiq/ https://www.themefair.com/mini-profiler-resources/ https://www.themefair.com/assets/ https://www.themefair.com/brotli_asset/ https://www.themefair.com/extra-locales/ https://www.themefair.com/highlight-js/ https://www.themefair.com/javascripts/ https://www.themefair.com/plugins/ https://www.themefair.com/theme-javascripts/ https://www.themefair.com/svg-sprite/ https://www.google-analytics.com/analytics.js https: 'unsafe-inline'". Note that 'script-src-elem' was not explicitly set, so 'script-src' is used as a fallback.
...

[Dax (Daniela)]

Is CSP turn on or off on your site?

Mitigate XSS Attacks with Content Security Policy

What is Content Security Policy? Content Security Policy (CSP) is an added layer of security that helps to detect and mitigate certain types of attacks, including Cross Site Scripting (XSS) and data injection attacks. These attacks are used for everything from data theft to site defacement to distribution of malware. – Content Security Policy (CSP) - HTTP | MDN XSS is still one of the most common web vulnerability – if someone else can run scripts on your site, it is not your site anymore. …

[iraszl (Ivan Raszl)]

Do you mean this setting on Discourse?