Hey community, I have currently the following isse and I’d be really happy, if someone could assist me on finding the right approach. I have installed discourse on an Ubuntu 21.10 server on Vultr went with the default setup and created already a let’s encrypt certificate (for www.example.com) during the installation My goal is that my forum is reachable only through www → www.example.com and not example.com Current situation: → http://example.com correctly redirects (301) to https://www.example.com → http://www.example.com correctly redirects (301) to https://www.example.com → https://example.com throws a certifcate error and is not redirected to the correct https://www.example.com (the certificate was issued for www.example.com and not for example.com) What is the best approach to make https://example.com redirect to https://www.example.com and how can I achieve my goal? Best, Elmi

The easiest way is to use www.forcewww.com for that. (Disclaimer: that’s my own service)

I followed this advice, and added a line to my app.yml: [immagine] Set up Let’s Encrypt with multiple domains / redirects Sysadmins NOTE: @pfaffman says: This page needs to be cleaned up. There is now a new ENV setting that will let you add more hostnames. In your app.yml under your DISCOURSE_HOSTNAME line (it can go many places but that one makes sense), add DISCOURSE_HOSTNAME_ALIASES: domain.com,other.domain.com and early reports suggest that you’ll get valid certs for those domains and that accessing https://domain.com will properly redirect you to your DISCOURSE_HOSTNAME without a certificate error. If you do that an… Though I don’t mind if people find me on the root domain or the www subdomain, so I haven’t tried it with redirects.

[immagine] JammyDodger: Though I don’t mind if people find me on the root domain or the www subdomain, so I haven’t tried it with redirects. Beware for duplicate content in search engines.

This is an area that I’m not that hot on. :slightly_smiling_face: What would the recommended way be? I currently have an A record for both the domain and the www subdomain that resolve to my digital ocean droplet.

Thanks a lot for your feedback @JammyDodger . I’ll give it a try even though it looks like it deals with a slightly different problem. But maybe it works. It is best practice to have only one version of your site. Duplicate Content: Why does it happen and how to fix issues - Moz

This kind redirecting is so trivial on any web-server and one googling reveals how to do it. Why is it different here?

I’m pretty certain that if you request both certificates it will redirect as you desire. The forcewww.com solution is easier. [immagine] Jagster: This kind redirecting is so trivial on any web-server and one googling reveals how to do it. Why is it different here? Because it’s inside of a docker container and none of the within-host solutions you find anywhere else are likely to be of any use.

Just a quick update to let you know what worked for me. I tried, but this didn’t worked for me.It looked like no additional certificate was issued. [immagine] Set up Let’s Encrypt with multiple domains / redirects Sysadmins NOTE: @pfaffman says: This page needs to be cleaned up. There is now a new ENV setting that will let you add more hostnames. In your app.yml under your DISCOURSE_HOSTNAME line (it can go many places but that one makes sense), add DISCOURSE_HOSTNAME_ALIASES: domain.com,other.domain.com and early reports suggest that you’ll get valid certs for those domains and that accessing https://domain.com will properly redirect you to your DISCOURSE_HOSTNAME without a certificate error. If you do that an… I also tried to solve my issue by following this suggestion, but this also didn’t work for me. [immagine] Setup Let’s Encrypt + non-www > www Sysadmins I finally made it work, and thought to put everything together in case someone needs it. This info is assembled from different topics on this forum. Thanks to @brahn and @techAPJ. This assumes you’ve completed the initial Let’s Encrypt setup: After you’ve done it, the following needs to be added to the app.yml in hooks section. It will do two things: setup SSL for both example.com and www.example.com. Just replace example.com with your domain name. redirect example.com to www.example.com I… The only thing which solved my issue so far was by following the instructions here http://www.forcewww.com/ Nevertheless, I think this is still not a desirable solution, as it relies on an external service. Of course, it is free of charge, but you’ll need to find a new solution once this service is down. I hope you don’t get me wrong @michaeld , it’s really a nice and easy solution which you are offering and I highly appreciate it. It would be pretty cool thing, if you could decide during the standard install to go only with a www or non www version to make our life a little bit easier :slight_smile:

[immagine] Elmi: I tried, but this didn’t worked for me.It looked like no additional certificate was issued. Though I haven’t tested it in the just month, I’m pretty sure it works. If you didn’t have your DNS set up correctly and ran it a bunch of times then you got rate limited. [immagine] Elmi: would be pretty cool thing, if you could decide during the standard install to go only with a www or non www Do you mean “and request a certificate with both hostnames?” That’s way too hard. The likelihood that it will just break things for lots of people who don’t know how to configure dns that way is very, very high.

[immagine] Elmi: → https://example.com throws a certifcate error and is not redirected to the correct https://www.example.com (the certificate was issued for http://www.example.com and not for http://example.com) [immagine] Elmi: What is the best approach to make https://example.com redirect to https://www.example.com and how can I achieve my goal? If you create a cert for both the apex and the www version, you’ll have both covered. :smiley As you stated, the cert does not include your apex domain… thus the error. Your redirects should be: http://example.com → https://example.com http://www.example.com → https://www.example.com. Then redirect https://example.com → https://www.example.com (your stated preferred domain). Then no matter whether someone types in the apex domain or the www version, they’ll land on your https://www.example.com without any errors. Best practice is to include both the apex and the www on your cert. Just make sure your amended/new cert is the one being served by your server, and not the old one.

[immagine] pfaffman: Because it’s inside of a docker container and none of the within-host solutions you find anywhere else are likely to be of any use. I see. And now you mentioned it I’ll start to remember — that was the second reason why I put Discourse behind ”normal” Nginx. The first reason was need to do some filtering. Well, my solution isn’t anykind fancy or technically demanding but not so popular at this circle. I must say docker is not very user friendly solution if such really trivial thing must be done using third party web-service. Otherwise docker must be very useful I reckon, unless it wouldn’t come so popular.

Da non www a www senza errore di certificato

Assistenza prodotto Installazione

michaeld (Michael - Communiteq) 16 Gennaio 2022, 7:28pm 5

Il modo più semplice è usare www.forcewww.com per questo. (Disclaimer: questo è il mio servizio)

DNS Settings for Digital Ocean Droplet - Root Domain?

Argomento		Risposte	Visualizzazioni
Www to non www with https Product Support	10	740	Novembre 13, 2023
LetsEncrypt working without www, not with www Product Support	11	2165	Gennaio 19, 2020
About force www to non www Product Support	29	3111	Gennaio 6, 2019
Making 'www' work with Discourse Product Support	30	3059	Maggio 15, 2020
Problem in installing Let's Encrypt SSL for www and non-www Self-hosting	10	4984	Dicembre 3, 2019

Da non www a www senza errore di certificato

Argomenti correlati