From 6c12b59678f1b3cbf0d72c25a80d680d5173d50a Mon Sep 17 00:00:00 2001 From: Jay Pfaffman Date: Tue, 19 Oct 2021 12:59:04 -0700 Subject: [PATCH] FIX: See that force_https is set for lets encrypt Recent changes to let's encrypt having to do with the surprisingly tragic root certificate update are causing sites not to have `force_https` set. This set force_https. There remain some issues with let's encrypt requesting certs when it shouldn't but this fixes the worst of the problem with little effort. --- templates/web.letsencrypt.ssl.template.yml | 1 + 1 file changed, 1 insertion(+) diff --git a/templates/web.letsencrypt.ssl.template.yml b/templates/web.letsencrypt.ssl.template.yml index 361f9d3..fcec567 100644 --- a/templates/web.letsencrypt.ssl.template.yml +++ b/templates/web.letsencrypt.ssl.template.yml @@ -1,5 +1,6 @@ env: LETSENCRYPT_DIR: "/shared/letsencrypt" + DISCOURSE_FORCE_HTTPS: true hooks: after_ssl: -- 2.25.1