Set Up Let's Encrypt with Second Domain for Existing Discourse Install

[oppman (Craig)]

I have an existing discourse self-hosted install that is setup with https.

https://community.old.domain works

I want to set up https://community.new.domain

I have forgotten how I set up Discourse initially. My questions:

1. where do I run let’s encrypt? Is there a script, or do I install certbot and python3-certbot-nginx somewhere? I am unfamiliar with docker, so I need a recipe or a set of steps if I have to run this in docker
2. once I have the certificate, how do I add the certificate to the nginx configuration?

I am switching the name of the community from old.domain to new.domain. I am hoping that the links to old.domain continue to work.

[NateDhaliwal]

Check out these guides:

Change the domain name or rename your Discourse

This guide explains how-to change the domain name of your Discourse site, and includes information about setting up DNS changes, editing configuration files, updating site settings, and correcting social logins and post content to reflect your new domain name. This guide is for self-hosted Discourse instances that were installed using our installation guide on GitHub. If you are hosted by Discourse, please see Configure your domain name for hosted Discourse for specific …

Set up HTTPS support with Let's Encrypt

This is a guide for enabling HTTPS on an existing Discourse installation using Let’s Encrypt. It assumes prior installation without HTTPS enabled. Required user level: System Administrator This guide is only for existing installs where HTTPS is not enabled. Following the official setup guide automatically enables HTTPS by default. So you’d like to add https to your Discourse absolutely free, courtesy of our friends at Let’s Encrypt? I…

[oppman (Craig)]

thank you for your help. If I go through these steps, the old.domain stop working immediately?

I’m worried that the old.domain links will stop working. There are many of them. People are more familiar with old.domain.

I want to use old.domain and new.domain at the same time for a month or two. is this possible?

[pfaffman (Jay Pfaffman)]

Somewhere there is a topic about how to add a second domain to the let’s encrypt certificate. I can’t find it, but that’s what you want

[oppman (Craig)]

Thanks. You may mean these?

Set up Let’s Encrypt with multiple domains / redirects

This is to address the problem where you get certificate errors with any redirects or CNAME DNS entries which point to your actual installed Discourse (sub)domain. If you do not have https configured already (you do if you have done a standard install recently) see Setting up Let’s Encrypt as your first step. There are two patterns that need to be replaced, one ending in --keylength, and another ending in --fullchainpath (in the actual file, your original domain is before each of these switche…

Let's Encrypte with multiple domains wasn't working for ECC certs

How do I initiate the renewal of the certificate, simply delete the old one from /shared/ssl?

These look pretty involved. I may have to get another domain to test on another company internal Discourse install before I try it on a large public site.

[pfaffman (Jay Pfaffman)]

@oppman

These look pretty involved.

Well, I went to some length to make it so that you could generate the text to paste in to your yml.

Another way to do it would be to just keep a server on the old domain with a valid cert that does the redirects.