### Author:  [@Abdelrahman\_MoHamed](https://meta.discourse.org/u/Abdelrahman_MoHamed)
#### Post date: [February 9, 2025, 9:09pm UTC](https://meta.discourse.org/t/old-multisite-domains-still-serving-default-forum-after-disabling-multisite/351365/1 "2025-02-09T21:09:08Z")
We were previously running a **Discourse multisite setup** with around 22 different forums. Recently, we decided to **remove the multisite configuration** and keep only the default site:
**Default site now:** `forum.mamapedia.com`
**Removed old multisite domain:** `forum.employ.com` (and 21 others)
#### The Issue:
Even after disabling the multisite setup, **the old multisite domains can still serve the default forum** (`forum.mamapedia.com`). For example:
- Visiting **`forum.mamapedia.com`** works as expected
- But visiting **`forum.employ.com`** still loads the Mamapedia forum
We expected that old domains like `forum.employ.com` would either:
1. Show an error (since they are no longer configured)
2. Redirect properly or be completely inactive
### Setup Notes:
- We are using **Cloudflare’s SSL certificates** with the **proxy option enabled** (traffic does not go directly to our server).
- We can remove the **A records** for the old domains, but we really want to **identify and fix the root cause** instead of relying on a DNS-based workaround.
### Steps Taken So Far:
1. **Removed multisite settings** from `discourse.conf` and database
2. **Restarted Discourse** and verified the `app.yml` settings
3. **Cleared cache and tested in incognito mode**
### Expected Behavior:
- `forum.mamapedia.com` should continue working
- `forum.employ.com` and other old domains should **not** serve the Mamapedia forum
### Questions:
1. How can we properly remove the old domains so they do not serve the default forum?
2. Do we need to adjust Nginx/Traefik settings, Cloudflare settings, or is there a Discourse-specific configuration we missed?
Nginx Config
---
### Author:  [@pfaffman](https://meta.discourse.org/u/pfaffman)
#### Post date: [February 9, 2025, 9:56pm UTC](https://meta.discourse.org/t/old-multisite-domains-still-serving-default-forum-after-disabling-multisite/351365/2 "2025-02-09T21:56:24Z")
You need to switch to a [standard install](https://meta.discourse.org/t/142537?silent=true). The stuff you’ve done to make it be multisite is to make it possible for the server to serve a bunch of domains.
If you make a new server and restore the backup then you can’t break anything since you’ll just switch back to the old one.
The only catch is that you need to point the dns to the new server while you rebuild so it can get a certificate. And make cloudflare dns only.
---
### Author:  [@Abdelrahman\_MoHamed](https://meta.discourse.org/u/Abdelrahman_MoHamed)
#### Post date: [February 10, 2025, 1:30pm UTC](https://meta.discourse.org/t/old-multisite-domains-still-serving-default-forum-after-disabling-multisite/351365/3 "2025-02-10T13:30:54Z")
Thanks @pfaffman , We attempted to switch from a **multisite** setup to a **[standard install](https://meta.discourse.org/t/142537?silent=true)**, but the issue still persists.
### What We Did:
1. **Removed the Discourse Installation:**
- Deleted the entire `/var/discourse` directory.
1. **Reinstalled Discourse:**
- Cloned the Discourse repo again.
- Recreated `app.yml` with the necessary configurations.
1. **Rebuilt the App:**
- Ran `./launcher rebuild app`.
1. **Updated DNS:**
- Pointed the domain to the new server.
- Set Cloudflare to **DNS-only** mode to allow SSL certificate issuance.
### Additional Issue with SSL:
- When we enabled **SSL in `app.yml`** and disabled Cloudflare proxy, we encountered the following issue even after enabling SSL
### Questions:
1. Could the issue be related to not restoring a database backup?
2. Are there additional steps needed to clean up old multisite configurations?
3. What’s the proper way to enable SSL in this setup without running into issues?
Would appreciate any guidance from those who’ve done this before!
---
### Author:  [@pfaffman](https://meta.discourse.org/u/pfaffman)
#### Post date: [February 10, 2025, 2:23pm UTC](https://meta.discourse.org/t/old-multisite-domains-still-serving-default-forum-after-disabling-multisite/351365/4 "2025-02-10T14:23:20Z")
> [@Abdelrahman\_MoHamed](#):
>
> Recreated `app.yml` with the necessary configurations.
Did you run discourse setup or do it by hand?
Do you have the ssl and let’s encrypt templates?
If you ran rebuilds a bunch of times with the orange cloud you could be rate limited
---
### Author:  [@RGJ](https://meta.discourse.org/u/RGJ)
#### Post date: [February 10, 2025, 5:58pm UTC](https://meta.discourse.org/t/old-multisite-domains-still-serving-default-forum-after-disabling-multisite/351365/5 "2025-02-10T17:58:46Z")
The reason this is happening is simple. Multisite will select a forum based on hostname. ~~A non-multisite install will happily accept whatever hostname you point to it. So as long as you have all the old hostnames directed to that install, it will serve the remaining site on all those hostnames.~~
> [@Abdelrahman\_MoHamed](#):
>
> We can remove the **A records** for the old domains, but we really want to **identify and fix the root cause** instead of relying on a DNS-based workaround.
Having the old records point at your site, _is_ the root cause.
Cleaning up your old configuration is not a workaround, it is the solution.
---
### Author:  [@pfaffman](https://meta.discourse.org/u/pfaffman)
#### Post date: [February 10, 2025, 7:14pm UTC](https://meta.discourse.org/t/old-multisite-domains-still-serving-default-forum-after-disabling-multisite/351365/6 "2025-02-10T19:14:40Z")
OMG. I don’t remember the last time that I disagreed with you on a matter of fact. As a rule, when I see your avatar in a topic that I’ve commented on, I know that I’m going to learn something!
> [@RGJ](#):
>
> The reason this is happening is simple. Multisite will select a forum based on hostname
That’s true. They claim, though, that they switched to a [standard install](https://meta.discourse.org/t/142537?silent=true). I don’t believe them.
> [@RGJ](#):
>
> A non-multisite install will happily accept whatever hostname you point to it.
For several years now (but I think since let’s encrypt was available), on a [standard install](https://meta.discourse.org/t/142537?silent=true) if you access it via any other hostname it’ll do a redirect (you can easily check by using the IP number and I just did another by setting `forum.bigmouth.bass` in `/etc/hosts` to a [standard install](https://meta.discourse.org/t/142537?silent=true) and it redirected as expected. If you access it via https, which most browsers do by default now, you’ll get a certificate error.
If all that was required to access your site via some other hostname was DNS then anyone could hijack your site by creating a DNS record pointing to your site.
I think this is the magic:
>
My guess is that the `app.yml` still has something like this:
> [@Setup Multisite Configuration with Let's Encrypt and no Reverse Proxy](https://meta.discourse.org/t/setup-multisite-configuration-with-lets-encrypt-and-no-reverse-proxy/175285/1):
>
> ```plaintext
> # do not redirect all hosts back to the main domain name
> - replace:
> filename: "/etc/nginx/conf.d/discourse.conf"
> from: /if \(\$http_host[^\}]*\}/m
> to: ""
> - replace:
> filename: "/etc/nginx/conf.d/discourse.conf"
> from: /return 301.*$/
> to: "return 301 https://$host$request_uri;"
>
> ```
---
### Author:  [@RGJ](https://meta.discourse.org/u/RGJ)
#### Post date: [February 10, 2025, 9:18pm UTC](https://meta.discourse.org/t/old-multisite-domains-still-serving-default-forum-after-disabling-multisite/351365/7 "2025-02-10T21:18:31Z")
> [@pfaffman](#):
>
> I know that I’m going to learn something!
Well TIL that I should update my facts more often! That code has been there since 2014 so I guess I was living waaay in the past.
You’re completely right, it will redirect.
---
### Author:  [@Abdelrahman\_MoHamed](https://meta.discourse.org/u/Abdelrahman_MoHamed)
#### Post date: [February 11, 2025, 12:06pm UTC](https://meta.discourse.org/t/old-multisite-domains-still-serving-default-forum-after-disabling-multisite/351365/8 "2025-02-11T12:06:52Z")
Thanks @RGJ , @pfaffman ,
We have checked app.yml, and there are no custom redirect configurations or overrides. However, our instance still isn’t redirecting unknown hostnames to the main domain.
1. Nginx Configuration: Is there a way to verify if the redirect logic from templates/web.ssl.template.yml is actually being applied? Should we manually check the generated Nginx config inside the container?
2. Discourse Debugging: Are there any logs or commands we can run inside the container to confirm that Discourse is handling hostnames correctly?
3. Other Potential Causes: If app.yml is clean, what else might prevent the expected redirect behavior? Could Cloudflare or another setting be interfering?
Would appreciate any pointers to dig deeper into this!
---
### Author:  [@RGJ](https://meta.discourse.org/u/RGJ)
#### Post date: [February 11, 2025, 12:19pm UTC](https://meta.discourse.org/t/old-multisite-domains-still-serving-default-forum-after-disabling-multisite/351365/9 "2025-02-11T12:19:51Z")
> [@RGJ](#):
>
> Cleaning up your old configuration is not a workaround, it is the solution.
Here’s a pointer.
---
### Author:  [@pfaffman](https://meta.discourse.org/u/pfaffman)
#### Post date: [February 11, 2025, 12:42pm UTC](https://meta.discourse.org/t/old-multisite-domains-still-serving-default-forum-after-disabling-multisite/351365/10 "2025-02-11T12:42:34Z")
Do the old domains all have the orange cloud turned on? Does riding off the orange cloud solve the problem? If so, then, as I expected all along, Richard is right and you need to clean up your setup.
But if using cloudflare allows a bad actor (you in this case) to serve someone else’s site on their domain, that seems like a problem.
---
### Author:  [@Abdelrahman\_MoHamed](https://meta.discourse.org/u/Abdelrahman_MoHamed)
#### Post date: [February 11, 2025, 1:08pm UTC](https://meta.discourse.org/t/old-multisite-domains-still-serving-default-forum-after-disabling-multisite/351365/11 "2025-02-11T13:08:19Z")
OK should I run
```plaintext
./discourse-setup
```
after downloading discourse or should I paste my old app.yml after downloading and then run
```plaintext
./launcher rebuild app
```
Which path should I take ?
---
### Author:  [@Abdelrahman\_MoHamed](https://meta.discourse.org/u/Abdelrahman_MoHamed)
#### Post date: [February 11, 2025, 1:10pm UTC](https://meta.discourse.org/t/old-multisite-domains-still-serving-default-forum-after-disabling-multisite/351365/12 "2025-02-11T13:10:18Z")
We already removed old domains but yes , they were having orange button enabled , the issue now if anyone got our server IP and a record there with enabling proxy option it will server our site with there domain
---
### Author:  [@pfaffman](https://meta.discourse.org/u/pfaffman)
#### Post date: [February 11, 2025, 4:27pm UTC](https://meta.discourse.org/t/old-multisite-domains-still-serving-default-forum-after-disabling-multisite/351365/13 "2025-02-11T16:27:13Z")
You should run `discourse-setup` to make sure that you really have a standard installation. If you paste your old `app.yml` then you might have something in there that does not belong. I’m still not quite convinced that you have a standard setup.
> [@Abdelrahman\_MoHamed](#):
>
> the issue now if anyone got our server IP and a record there with enabling proxy option it will server our site with there domain
I’m still not convinced that’s the case, but if it is, there’s nothing you can do about it.
---
### Author:  [@Jagster](https://meta.discourse.org/u/Jagster)
#### Post date: [February 11, 2025, 4:58pm UTC](https://meta.discourse.org/t/old-multisite-domains-still-serving-default-forum-after-disabling-multisite/351365/14 "2025-02-11T16:58:03Z")
> [@Abdelrahman\_MoHamed](#):
>
> if anyone got our server IP
The most of the world’s server IP’s are public. That is kind of the point of IP-system.
---
### Author:  [@Abdelrahman\_MoHamed](https://meta.discourse.org/u/Abdelrahman_MoHamed)
#### Post date: [February 12, 2025, 8:23am UTC](https://meta.discourse.org/t/old-multisite-domains-still-serving-default-forum-after-disabling-multisite/351365/15 "2025-02-12T08:23:02Z")
I really wanna thank you @pfaffman @RGJ, now it’s clean and almost good
The issue we are facing now is that all branding pictures have gone and sthe ame for some user’s images.
The branding data is ok I can download it from the old server but what about the users’s images and all site images also missing
New Server
Old Server
**NOTES:**
- we have followed the migration steps by running `discourse remap` to the same domain and `rake posts:rebake`
- Could it be related to multisite history so we need a specific remap according to this link
[Serve Discourse from a subfolder (path prefix) instead of a subdomain - #101 by jtraulle](https://meta.discourse.org/t/serve-discourse-from-a-subfolder-path-prefix-instead-of-a-subdomain/30507/101) ?
---
### Author:  [@pfaffman](https://meta.discourse.org/u/pfaffman)
#### Post date: [February 12, 2025, 2:34pm UTC](https://meta.discourse.org/t/old-multisite-domains-still-serving-default-forum-after-disabling-multisite/351365/16 "2025-02-12T14:34:02Z")
If this wasn’t the main site for the multisite then the path for the uploads is the name and the site and not default.
---
### Author:  [@Jacob\_Peebles](https://meta.discourse.org/u/Jacob_Peebles)
#### Post date: [February 12, 2025, 9:06pm UTC](https://meta.discourse.org/t/old-multisite-domains-still-serving-default-forum-after-disabling-multisite/351365/17 "2025-02-12T21:06:59Z")
Looking at the missing images they appear to have a ‘nested’ url, here is one:
```plaintext
(https://forum.mamapedia.com/user_avatar/forum.mamapedia.com/jakeatgetit/24/5872_2.png)
```
And @pfaffman this was in fact the main site in the multisite setup.
CC: @Abdelrahman_MoHamed
---
### Author:  [@pfaffman](https://meta.discourse.org/u/pfaffman)
#### Post date: [February 12, 2025, 9:10pm UTC](https://meta.discourse.org/t/old-multisite-domains-still-serving-default-forum-after-disabling-multisite/351365/18 "2025-02-12T21:10:56Z")
> [@Jacob\_Peebles](#):
>
> `/user_avatar/forum.mamapedia.com/`
Hmm. Well, if it were the main site, I’d expect that path to be `https://forum.mamapedia.com/user_avatar/forum.mamapedia.com/jakeatgetit/24/5872_2.png`, but that doesn’t work either.
If you’ve still got the old site, I’d take a backup of this one and restore it on the new site.
---
### Author:  [@Abdelrahman\_MoHamed](https://meta.discourse.org/u/Abdelrahman_MoHamed)
#### Post date: [February 13, 2025, 10:28am UTC](https://meta.discourse.org/t/old-multisite-domains-still-serving-default-forum-after-disabling-multisite/351365/19 "2025-02-13T10:28:53Z")
Thanks @pfaffman , what I have done so far seems working.
I got into the old server and moved the data form `/var/discourse/shared/standalone/uploads/default` to the same path on the new server and all user avatars and posts came back
The new issue is that site branding is not working even if I try to update it.
Here is a one-minute screen record
[https://www.veed.io/view/89c9e122-57bd-40b3-a5c5-d510a56973e4?panel=share](https://www.veed.io/view/89c9e122-57bd-40b3-a5c5-d510a56973e4?panel=share)
---
### Author:  [@Jacob\_Peebles](https://meta.discourse.org/u/Jacob_Peebles)
#### Post date: [February 14, 2025, 3:28pm UTC](https://meta.discourse.org/t/old-multisite-domains-still-serving-default-forum-after-disabling-multisite/351365/20 "2025-02-14T15:28:25Z")
Checking back here to see if anyone has any ideas. We are very close to closing this out on our end, just need some assistance in trouble shooting the ‘non-logo’ saving issue. Thanks in advance for any ideas to solve it!
[Next page](https://meta.discourse.org/t/old-multisite-domains-still-serving-default-forum-after-disabling-multisite/351365.md?page=2)