# Unsecure error message

**URL:** https://meta.discourse.org/t/unsecure-error-message/119142
**Category:** Self-hosting
**Created:** [May 31, 2019, 1:06am UTC](https://meta.discourse.org/t/unsecure-error-message/119142 "2019-05-31T01:06:03Z")
**Posts on this page:** 17
**Page:** 1

<div class="post-metadata">

### Author: ![Joshua\_Kogan](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/joshua_kogan/32/127595_2.png) [@Joshua\_Kogan](https://meta.discourse.org/u/Joshua_Kogan)
#### Post date: [May 31, 2019, 1:06am UTC](https://meta.discourse.org/t/unsecure-error-message/119142/1 "2019-05-31T01:06:03Z")

</div>

Hi everyone,  
My first time installing, and I’m running into a roadblock. Here are the details:

- My url is hosted at 1&1
- I’m using mailgun, and it is “active”, and I’ve updated my DNS setting with mailgun requirements.
- I’ve setup a 2GB $10 droplet at DigitalOcean.

Now, I open the console through Digital Ocean, login fine (root + password), and go through all of the discourse configuration steps without any errors UNTIL the end of the intial configuration. When I go to my IP address in Firefox, I get the user registration wizard, I fill it out, and when I submit it, I get an unsecure connection message. I check my email, and the discourse confirmation email is there. If I click the link, it also sends me to an unsecure connection message.

Any thoughts and/or guidance? Please excuse my ignorance – I’m a good student, and you time will be much appreciated.

---

<div class="post-metadata">

### Author: ![Joshua\_Kogan](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/joshua_kogan/32/127595_2.png) [@Joshua\_Kogan](https://meta.discourse.org/u/Joshua_Kogan)
#### Post date: [May 31, 2019, 1:08am UTC](https://meta.discourse.org/t/unsecure-error-message/119142/2 "2019-05-31T01:08:09Z")

</div>

I aslo have my A record pointing to my Digital Ocean IP address. That and the mailgun DNS settings are all that I have. Am I missing something?

---

<div class="post-metadata">

### Author: ![Stephen](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/stephen/32/95011_2.png) [@Stephen](https://meta.discourse.org/u/Stephen)
#### Post date: [May 31, 2019, 6:37am UTC](https://meta.discourse.org/t/unsecure-error-message/119142/3 "2019-05-31T06:37:37Z")

</div>

Access by IP is completely unsupported.

Have you configured SSL? If so, how?

---

<div class="post-metadata">

### Author: ![Joshua\_Kogan](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/joshua_kogan/32/127595_2.png) [@Joshua\_Kogan](https://meta.discourse.org/u/Joshua_Kogan)
#### Post date: [May 31, 2019, 10:54am UTC](https://meta.discourse.org/t/unsecure-error-message/119142/4 "2019-05-31T10:54:39Z")

</div>

I uncommeted the three lines of let’s encrypt code and added my email at /var/discourse/containers/app.yml

Do.i need to do something else?

---

<div class="post-metadata">

### Author: ![Joshua\_Kogan](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/joshua_kogan/32/127595_2.png) [@Joshua\_Kogan](https://meta.discourse.org/u/Joshua_Kogan)
#### Post date: [May 31, 2019, 12:15pm UTC](https://meta.discourse.org/t/unsecure-error-message/119142/5 "2019-05-31T12:15:42Z")

</div>

I can see now that it works on safari, albeit, not secure. How do I resolve? I thought using Let’s Encrypt took care of securing the site. What else do I need to do? Thank you in advance!

---

<div class="post-metadata">

### Author: ![Joshua\_Kogan](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/joshua_kogan/32/127595_2.png) [@Joshua\_Kogan](https://meta.discourse.org/u/Joshua_Kogan)
#### Post date: [May 31, 2019, 12:20pm UTC](https://meta.discourse.org/t/unsecure-error-message/119142/6 "2019-05-31T12:20:49Z")

</div>

@Stephen, do I need to rebuild after I uncomment for Let’s Encrypt?

---

<div class="post-metadata">

### Author: ![Stephen](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/stephen/32/95011_2.png) [@Stephen](https://meta.discourse.org/u/Stephen)
#### Post date: [May 31, 2019, 1:14pm UTC](https://meta.discourse.org/t/unsecure-error-message/119142/7 "2019-05-31T13:14:03Z")

</div>

Yes, you need to uncomment let’s encrypt, web.ssl, the expose 443, and provide an email for the lets encrypt email field.

---

<div class="post-metadata">

### Author: ![Joshua\_Kogan](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/joshua_kogan/32/127595_2.png) [@Joshua\_Kogan](https://meta.discourse.org/u/Joshua_Kogan)
#### Post date: [May 31, 2019, 1:24pm UTC](https://meta.discourse.org/t/unsecure-error-message/119142/8 "2019-05-31T13:24:51Z")

</div>

Thank you, @Stephen, but that’s not working. On my ipad/safari, I can access the site with an unsecure warning. But, on my computer firefox, this is what I get (www):

 ![22%20AM](https://global.discourse-cdn.com/meta/original/3X/6/a/6aa5f1cd3bbe6daf6c7c0003dc08a4be337f5a72.png)

This is what I get (no www – notice https):

 ![35%20AM](https://global.discourse-cdn.com/meta/original/3X/e/4/e44014c0b8a5920f3c8a612db34bb14352f9abcd.png)

If I try just the IP address, I get a white screen:

 ![18%20AM](https://global.discourse-cdn.com/meta/original/3X/f/c/fc0f59d4752a3a423835cb6a45169c0bd5063995.png)

Here’s screenshot from my console:

 ![29%20AM](https://global.discourse-cdn.com/meta/original/3X/9/2/9245f23387af722e149626a29c9d64484e4babee.png)  
[I removed the screenshot that showed my email address]

Here’s DNS settings where my url is hosted:

 ![31%20AM](https://global.discourse-cdn.com/meta/original/3X/5/7/5792c1801e1c2cc732db4ae8bf1e43f4a2038120.png)

Here’s a screenshot from DNS checker site:

 ![55%20AM](https://global.discourse-cdn.com/meta/original/3X/9/b/9b67bda63aa06662fd2a6067a5dd6d879aa7d3c7.png)

What am I messing up on? **Thank you, again, for helping me with this!!!**

---

<div class="post-metadata">

### Author: ![Stephen](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/stephen/32/95011_2.png) [@Stephen](https://meta.discourse.org/u/Stephen)
#### Post date: [May 31, 2019, 1:33pm UTC](https://meta.discourse.org/t/unsecure-error-message/119142/9 "2019-05-31T13:33:27Z")

</div>

And you have rebuilt since editing the app.yml to include those fields?

I would recommend removing the screenshot with your email address.

Is this hosted on a DSL line?

---

<div class="post-metadata">

### Author: ![Joshua\_Kogan](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/joshua_kogan/32/127595_2.png) [@Joshua\_Kogan](https://meta.discourse.org/u/Joshua_Kogan)
#### Post date: [May 31, 2019, 1:36pm UTC](https://meta.discourse.org/t/unsecure-error-message/119142/10 "2019-05-31T13:36:12Z")

</div>

I didn’t rebuild after uncommenting. I will do that. Yes, DSL.

---

<div class="post-metadata">

### Author: ![Stephen](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/stephen/32/95011_2.png) [@Stephen](https://meta.discourse.org/u/Stephen)
#### Post date: [May 31, 2019, 1:40pm UTC](https://meta.discourse.org/t/unsecure-error-message/119142/11 "2019-05-31T13:40:23Z")

</div>

You may well find your ISP disallows traffic to :443 then.

---

<div class="post-metadata">

### Author: ![Joshua\_Kogan](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/joshua_kogan/32/127595_2.png) [@Joshua\_Kogan](https://meta.discourse.org/u/Joshua_Kogan)
#### Post date: [May 31, 2019, 1:41pm UTC](https://meta.discourse.org/t/unsecure-error-message/119142/12 "2019-05-31T13:41:06Z")

</div>

Ok. What would I do then?

---

<div class="post-metadata">

### Author: ![Joshua\_Kogan](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/joshua_kogan/32/127595_2.png) [@Joshua\_Kogan](https://meta.discourse.org/u/Joshua_Kogan)
#### Post date: [May 31, 2019, 1:44pm UTC](https://meta.discourse.org/t/unsecure-error-message/119142/13 "2019-05-31T13:44:13Z")

</div>

The rebuild worked!! I’m live on all browsers now, but only without “www” – how do I get my site to work if a user types in the www? Do I add a A record www in my DNS settings?

---

<div class="post-metadata">

### Author: ![Stephen](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/stephen/32/95011_2.png) [@Stephen](https://meta.discourse.org/u/Stephen)
#### Post date: [May 31, 2019, 1:47pm UTC](https://meta.discourse.org/t/unsecure-error-message/119142/14 "2019-05-31T13:47:58Z")

</div>

Yes.

> [@Joshua\_Kogan](#):
>
> Ok. What would I do then?

Nearly all consumer-grade connections prohibit running servers. If your ISP detects it then at best you will get a nasty letter, at worst they might terminate your connection. I would consult their ToS to see what their enforcement policy is.

---

<div class="post-metadata">

### Author: ![Joshua\_Kogan](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/joshua_kogan/32/127595_2.png) [@Joshua\_Kogan](https://meta.discourse.org/u/Joshua_Kogan)
#### Post date: [May 31, 2019, 1:48pm UTC](https://meta.discourse.org/t/unsecure-error-message/119142/15 "2019-05-31T13:48:38Z")

</div>

Okay. THank you for the education.

---

<div class="post-metadata">

### Author: ![Joshua\_Kogan](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/joshua_kogan/32/127595_2.png) [@Joshua\_Kogan](https://meta.discourse.org/u/Joshua_Kogan)
#### Post date: [May 31, 2019, 1:51pm UTC](https://meta.discourse.org/t/unsecure-error-message/119142/16 "2019-05-31T13:51:19Z")

</div>

Thoughts on my last question? How to get the [www.mysite.com](http://www.mysite.com) to work – right now it only works without “www.”

---

<div class="post-metadata">

### Author: ![Joshua\_Kogan](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/joshua_kogan/32/127595_2.png) [@Joshua\_Kogan](https://meta.discourse.org/u/Joshua_Kogan)
#### Post date: [May 31, 2019, 1:56pm UTC](https://meta.discourse.org/t/unsecure-error-message/119142/17 "2019-05-31T13:56:16Z")

</div>

Nevermind. The www A record worked. THANKS AGAIN!!!
