Discourse

Discourse is installed with a docker container. This is the configuration of the container in /var/discourse/containers/app.yml:

## this is the all-in-one, standalone Discourse Docker container template
##
## After making changes to this file, you MUST rebuild
## /var/discourse/launcher rebuild app
##
## BE *VERY* CAREFUL WHEN EDITING!
## YAML FILES ARE SUPER SUPER SENSITIVE TO MISTAKES IN WHITESPACE OR ALIGNMENT!
## visit http://www.yamllint.com/ to validate this file as needed

templates:
  - "templates/postgres.template.yml"
  - "templates/redis.template.yml"
  - "templates/web.template.yml"
  - "templates/web.ratelimited.template.yml"
## Uncomment these two lines if you wish to add Lets Encrypt (https)
  - "templates/web.ssl.template.yml"
  - "templates/web.letsencrypt.ssl.template.yml"

## which TCP/IP ports should this container expose?
## If you want Discourse to share a port with another webserver like Apache or nginx,
## see https://meta.discourse.org/t/17247 for details
expose:
  - "80:80"   # http
  - "443:443" # https

params:
  db_default_text_search_config: "pg_catalog.english"

  ## Set db_shared_buffers to a max of 25% of the total memory.
  ## will be set automatically by bootstrap based on detected RAM, or you can override
  db_shared_buffers: "256MB"

  ## can improve sorting performance, but adds memory usage per-connection
  #db_work_mem: "40MB"

  ## Which Git revision should this container use? (default: tests-passed)
  #version: tests-passed

env:
  LANG: en_US.UTF-8
  # DISCOURSE_DEFAULT_LOCALE: en

  ## How many concurrent web requests are supported? Depends on memory and CPU cores.
  ## will be set automatically by bootstrap based on detected CPUs, or you can override
  UNICORN_WORKERS: 4

  ## TODO: The domain name this Discourse instance will respond to
  ## Required. Discourse will not work with a bare IP number.
  DISCOURSE_HOSTNAME: discourse-imphys.tudelft.nl
  #DISCOURSE_HOSTNAME: ap3122-forum.tnw.tudelft.nl

  ## Uncomment if you want the container to be started with the same
  ## hostname (-h option) as specified above (default "$hostname-$config")
  # DOCKER_USE_HOSTNAME: true

  ## TODO: List of comma delimited emails that will be made admin and developer
  ## on initial signup example 'user1@example.com,user2@example.com'
  DISCOURSE_DEVELOPER_EMAILS: 'r.ligteringen@tudelft.nl'

  ## TODO: The SMTP mail server used to validate new accounts and send notifications
  # SMTP ADDRESS, username, and password are required
  # WARNING the char '#' in SMTP password can cause problems!
  DISCOURSE_SMTP_ADDRESS: dutmail.tudelft.nl
  DISCOURSE_SMTP_PORT: 25
  #DISCOURSE_SMTP_USER_NAME: r.ligteringen@tudelft.nl
  #DISCOURSE_SMTP_PASSWORD: "pa$$word"
  #DISCOURSE_SMTP_ENABLE_START_TLS: true           # (optional, default true)

  ## If you added the Lets Encrypt template, uncomment below to get a free SSL certificate
  LETSENCRYPT_ACCOUNT_EMAIL: r.ligteringen@tudelft.nl

  ## The http or https CDN address for this Discourse instance (configured to pull)
  ## see https://meta.discourse.org/t/14857 for details
  #DISCOURSE_CDN_URL: https://discourse-cdn.example.com

  DISCOURSE_SAML_TARGET_URL: https://engine.test.surfconext.nl/authentication/idp/single-sign-on/key:20190208
  #  DISCOURSE_SAML_CERT_FINGERPRINT: "E2:92:D7:B6:7E:FB:39:4D:FD:15:E0:B0:37:9C:67:BC:E1:CF:7B:F1:FC:8D:CA:1C:13:3F:E7:18:A1:21:BE:BF"
  DISCOURSE_SAML_CERT_FINGERPRINT: "B7:D7:CD:4B:24:5B:B9:6E:C1:D6:47:81:80:67:15:08:34:1F:3A:2C"
  DISCOURSE_SAML_CERT: "-----BEGIN CERTIFICATE-----
<SNIP>
-----END CERTIFICATE-----"
  DISCOURSE_SAML_DEBUG_AUTH: true
  #  DISCOURSE_SAML_USE_ATTRIBUTES_UID: true
  DISCOURSE_SAML_REQUEST_ATTRIBUTES: "mail|displayName|givenName|sn"
  DISCOURSE_SAML_ATTRIBUTE_STATEMENTS: "name:displayName|email:mail|first_name:givenName|last_name:sn|nickname:displayName"


## The Docker container is stateless; all data is stored in /shared
volumes:
  - volume:
      host: /var/discourse/shared/standalone
      guest: /shared
  - volume:
      host: /var/discourse/shared/standalone/log/var-log
      guest: /var/log

## Plugins go here
## see https://meta.discourse.org/t/19157 for details
hooks:
  after_code:
    - exec:
        cd: $home/plugins
        cmd:
          - git clone https://github.com/discourse/docker_manager.git
          - git clone https://github.com/discourse/discourse-saml.git
          - git clone https://github.com/jonmbake/discourse-ldap-auth
          - git clone https://github.com/discourse/discourse-math

## Any custom commands to run after building
run:
  - exec: echo "Beginning of custom commands"
  ## If you want to set the 'From' email address for your first registration, uncomment and change:
  ## After getting the first signup email, re-comment the line. It only needs to run once.
  #- exec: rails r "SiteSetting.notification_email='info@unconfigured.discourse.org'"
  - exec: echo "End of custom commands"

After installation the main plugin to be installed is LDAP. All settings within Discourse are shown in the screenshots below:

---

Last update: 2023-03-24