没有 `force_https` 设置吗？

balupton · 2024 年2 月 5 日 19:39

Has the force_https setting been removed? Or is does it not show up if certain templates are used. Here are the templates I’m using:

templates:
  - "templates/postgres.template.yml"
  - "templates/redis.template.yml"
  - "templates/web.template.yml"
  - "templates/cloudflare.template.yml"
  - "templates/web.ssl.template.yml"  # https
  - "templates/web.letsencrypt.ssl.template.yml"  # https
  # - "templates/web.ratelimited.template.yml" # not needed

Arkshine · 2024 年2 月 5 日 20:24

I don’t think so. I see no changes around force_https and I can still see the setting

`

JammyDodger · 2024 年2 月 5 日 20:39

I think there is some magic that hides it if you meet certain criteria:

pfaffman · 2024 年2 月 5 日 20:57

Without finding the code, I think what happens is that if you have a certificate, DISCOURSE_FORCE_HTTPS gets set to true, so it’s hidden from the UX.

JammyDodger · 2024 年2 月 5 日 21:16

I was looking for this the other day. Is it this bit:

github.com

discourse/discourse_docker/blob/1964d1737a36b4f46ed3c0bc8b25db24e1a9a0c2/templates/web.letsencrypt.ssl.template.yml#L104


      
              fi
          
              LE_WORKING_DIR="${LETSENCRYPT_DIR}" $$ENV_LETSENCRYPT_DIR/acme.sh \
                --installcert --ecc \
                -d $$ENV_DISCOURSE_HOSTNAME \
                --fullchainpath /shared/ssl/$$ENV_DISCOURSE_HOSTNAME_ecc.cer \
                --keypath /shared/ssl/$$ENV_DISCOURSE_HOSTNAME_ecc.key \
                --reloadcmd "sv reload nginx"
          
              if cert_exists "" || cert_exists "_ecc"; then
                grep -q 'force_https' "/var/www/discourse/config/discourse.conf" || echo "force_https = 'true'" >> "/var/www/discourse/config/discourse.conf"
              fi
          
              /usr/sbin/nginx -c /etc/nginx/letsencrypt.conf -s stop
          
          - replace:
             filename: "/etc/nginx/conf.d/discourse.conf"
             from: /ssl_certificate.+/
             to: |
               ssl_certificate /shared/ssl/$$ENV_DISCOURSE_HOSTNAME.cer;
               ssl_certificate /shared/ssl/$$ENV_DISCOURSE_HOSTNAME_ecc.cer;

pfaffman · 2024 年2 月 5 日 21:18

That’s it! The other way to get stuff into config/discourse.conf is setting an ENV variable, which results in something writing those out to that file just like that.

system · 2024 年3 月 6 日 21:18

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.

话题		回复	浏览量
Couldn't find force https Support unsupported-install	3	702	2018 年5 月 15 日
Can't find force https setting anymore Support	3	1761	2019 年5 月 16 日
Prompt to enable Force HTTPS in the wizard Feature	13	3124	2018 年7 月 20 日
HTTPS through Proxy; Discourse still trying to get files using HTTP Installation	22	1198	2020 年5 月 4 日
Discourse not aware of SSL termination (mixed content) Installation	9	1837	2023 年2 月 15 日

没有 `force_https` 设置吗？

相关话题