我的 nginx 服务器配置出现了问题。
当我运行时,nginx -t
它说一切都正确,但是当我检查每个文件的配置文件时,它是 KO。它说:
nginx:[emerg] /etc/nginx/sites-available/thebishop.fr.conf:1 中不允许使用“server”指令
这里有一些配置文件:nginx.conf
user www-data;
worker_processes auto;
pid /run/nginx.pid;
events {
worker_connections 768;
# multi_accept on;
}
http {
##
# Basic Settings
##
sendfile on;
tcp_nopush on;
tcp_nodelay on;
keepalive_timeout 65;
types_hash_max_size 2048;
server_tokens off;
more_set_headers 'Server: 185.216.27.123';
client_max_body_size 20M;
fastcgi_buffers 16 16k;
fastcgi_buffer_size 32k;
# server_names_hash_bucket_size 64;
# server_name_in_redirect off;
include /etc/nginx/mime.types;
default_type application/octet-stream;
##
# SSL Settings
##
ssl_protocols TLSv1 TLSv1.1 TLSv1.2; # Dropping SSLv3, ref: POODLE
ssl_prefer_server_ciphers on;
##
# Logging Settings
##
access_log /var/log/nginx/access.log;
error_log /var/log/nginx/error.log;
##
# Gzip Settings
##
gzip on;
gzip_disable "msie6";
gzip_vary on;
gzip_proxied any;
gzip_comp_level 6;
gzip_buffers 16 8k;
gzip_http_version 1.1;
gzip_types text/plain text/css application/json application/javascript text/xml application/xml application/xml+rss text/javascript;
##
# Virtual Host Configs
##
include /etc/nginx/conf.d/*.conf;
include /etc/nginx/sites-enabled/*;
}
thebishop.fr.conf:
server {
listen 80;
server_name thebishop.fr www.thebishop.fr;
return 301 https://$host$request_uri;
}
server {
listen 443 ssl;
server_name thebishop.fr;
ssl_certificate /etc/letsencrypt/live/thebishop.fr/fullchain.pem; # managed by Certbot
ssl_certificate_key /etc/letsencrypt/live/thebishop.fr/privkey.pem; # managed by Certbot
return 301 $scheme://www.thebishop.fr$request_uri;
}
server {
listen 443 ssl;
server_name www.thebishop.fr;
root /var/www/html/thebishop.fr;
index index.html index.php;
location ~ \.php$ {
fastcgi_pass unix:/var/run/php/php7.0-fpm.sock;
fastcgi_split_path_info ^(.+\.php)(/.*)$;
include fastcgi_params;
fastcgi_param SCRIPT_FILENAME $realpath_root$fastcgi_script_name;
fastcgi_param DOCUMENT_ROOT $realpath_root;
}
error_log /var/log/nginx/thebishop.fr_error.log;
access_log /var/log/nginx/thebishop.fr_access.log;
ssl_certificate /etc/letsencrypt/live/thebishop.fr/fullchain.pem; # managed by Certbot
ssl_certificate_key /etc/letsencrypt/live/thebishop.fr/privkey.pem; # managed by Certbot
include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
# Redirect non-https traffic to https
# if ($scheme != "https") {
# return 301 https://$host$request_uri;
# } # managed by Certbot
}
#mail {
# # See sample authentication script at:
# # http://wiki.nginx.org/ImapAuthenticateWithApachePhpScript
#
# # auth_http localhost/auth.php;
# # pop3_capabilities "TOP" "USER";
# # imap_capabilities "IMAP4rev1" "UIDPLUS";
#
# server {
# listen localhost:110;
# protocol pop3;
# proxy on;
# }
#
# server {
# listen localhost:143;
# protocol imap;
# proxy on;
# }
#}
答案1
当您说“逐个文件检查配置文件”时,您该怎么做?为什么?另外,“KO”代表什么?
“服务器”指令是仅在 http 块内有效,因此逐个文件检查是行不通的。只要“nginx -t”有效并且 nginx 运行时没有错误,我就看不到问题。
如果我没有回答您的问题,请编辑它以包含有关您所做操作的更多详细信息,包括命令行和输出、Nginx 错误,并删除缩写。
答案2
这两行nginx.conf
是按以下顺序包含这些目录中的所有文件的指令:
include /etc/nginx/conf.d/*.conf;
include /etc/nginx/sites-enabled/*;
尝试交换它们,这thebishop.fr.conf
肯定是下一个要包含的内容。你想要:
include /etc/nginx/sites-enabled/*;
include /etc/nginx/conf.d/*.conf;
答案3
你应该只跑步nginx -t
您所做的是运行一个旨在手动“设置” nginx 核心配置的命令。它并非用于检查包含的文件,而是用于手动告诉 nginx 在哪里找到nginx.conf
。
服务器块必须位于 http 块内。显然,该文件不包含 http 块,因为它是一个包含文件。
只需执行 nginx -t 即可完全实现您想要实现的功能,并且 100% 是测试您的配置是否正确的正确方法。