☰

Nginx 忽略已加载的配置并在“/etc/nginx/html/index.html”中搜索

tag-icon • tag-icon nginx
Nginx 忽略已加载的配置并在“/etc/nginx/html/index.html”中搜索

我将 nginx 更新到 1.16，我的网站停止工作。它在“/etc/nginx/html/index.html”中查找文件

以下是日志

2019/05/10 18:16:24 [error] 125559#125559: *1 "/etc/nginx/html/index.html" is not found (2: No such file or directory), client: 37.117.29.208, server: next.dday.it, request: "GET / HTTP/2.0", host: "next.dday.it"
2019/05/10 18:16:25 [error] 125559#125559: *1 "/etc/nginx/html/index.html" is not found (2: No such file or directory), client: 37.117.29.208, server: next.dday.it, request: "GET / HTTP/2.0", host: "next.dday.it"
2019/05/10 18:21:14 [error] 125700#125700: *1 "/etc/nginx/html/index.html" is not found (2: No such file or directory), client: 37.117.29.208, server: next.dday.it, request: "GET / HTTP/2.0", host: "next.dday.it"

这是我的 nginx.conf

user www-data;
worker_processes auto;
pid /run/nginx.pid;
include /etc/nginx/modules-enabled/*.conf;

events {
    worker_connections 1024;
    # multi_accept on;
}

http {

    ##
    # Basic Settings
    ##

    sendfile on;
    tcp_nopush on;
    tcp_nodelay on;
    keepalive_timeout 65;
    types_hash_max_size 2048;
    # server_tokens off;

    # server_names_hash_bucket_size 64;
    # server_name_in_redirect off;

    include /etc/nginx/mime.types;
    default_type application/octet-stream;

        # SSL Settings
        ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
        ssl_prefer_server_ciphers on;
        ssl_ciphers "EECDH+ECDSA+AESGCM EECDH+aRSA+AESGCM EECDH+ECDSA+SHA384 EECDH+ECDSA+SHA256 EECDH+aRSA+SHA384 EECDH+aRSA+SHA256 EECDH+aRSA+RC4 EECDH EDH+aRSA RC4 !aNULL !eNULL !LOW !3DES !MD5 !EXP !PSK !SRP !DSS";
        ssl_ecdh_curve prime256v1:secp384r1;

        add_header Strict-Transport-Security "max-age=63072000; includeSubDomains; preload";
        add_header X-Frame-Options DENY; # change to SAMEORIGIN for iframes
# Optimize session cache
        ssl_session_cache shared:SSL:50m;
        ssl_session_timeout 1d;

        # Enable session tickets
        ssl_session_tickets on;

        # OCSP Stapling
        ssl_stapling on;
        ssl_stapling_verify on;
        resolver 8.8.8.8 8.8.4.4 208.67.222.222 208.67.220.220 valid=60s;
        resolver_timeout 2s;

        ##
    # Logging Settings
    ##

    access_log /var/log/nginx/access.log;
    error_log /var/log/nginx/error.log;

    ##
    # Gzip Settings
    ##

    gzip on;
        gzip_disable "msie6";
        gzip_vary on;
        gzip_proxied any;
        gzip_comp_level 6;
        gzip_buffers 32 16k;
        gzip_http_version 1.1;
        gzip_min_length 250;
        gzip_types image/jpeg image/bmp image/svg+xml text/plain text/css application/json application/javascript application/x-javascript text/xml application/xml application/xml+rss text/javascript image/x-icon;

        # Brotli Settings
brotli on;
        brotli_comp_level 4;
        brotli_buffers 32 8k;
        brotli_min_length 100;
        brotli_static on;
    brotli_types image/jpeg image/bmp image/svg+xml text/plain text/css application/json application/javascript application/x-javascript text/xml application/xml application/xml+rss text/javascript image/x-icon;

    ##
    # Virtual Host Configs
    ##

    include /etc/nginx/sites-enabled/*.*;

如果我尝试使用 NGINX -T，则 sites-enabled 下的配置就会被加载！

upstream puma_next.dday.it {
  server unix:/home/scriptamanent/apps/dday.it/shared/tmp/sockets/dday.it-puma.sock fail_timeout=0;
}
server {
  listen 80;
  listen [::]:80;
  server_name next.dday.it;
  return 301 https://next.dday.it$request_uri;
}

server {
    listen 443 ssl http2;
    listen [::]:443 ssl http2;
    server_name next.dday.it;
}


server {
  listen 443 ssl http2 default_server;
  listen [::]:443 ssl http2 default_server;
  ssl_certificate /etc/letsencrypt/live/next.dday.it/fullchain.pem;
  ssl_certificate_key /etc/letsencrypt/live/next.dday.it/privkey.pem;
  root /home/scriptamanent/apps/dday.it/current/public;
  try_files $uri/index.html $uri @puma_next.dday.it;

  client_max_body_size 4G;
  keepalive_timeout 10;

  error_page 500 502 504 /500.html;
  error_page 503 @503;

  location @puma_next.dday.it {
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header Host $host;
    proxy_redirect off;
    proxy_set_header Upgrade $http_upgrade;
    proxy_set_header Connection "Upgrade";
ssi on;
    proxy_set_header X-Forwarded-Proto https;
    proxy_pass http://puma_next.dday.it;
    # limit_req zone=one;
    access_log /home/scriptamanent/apps/dday.it/shared/log/nginx.access.log;
    error_log /home/scriptamanent/apps/dday.it/shared/log/nginx.error.log;
  }

  location ^~ /assets/ {
    gzip_static on;
    expires max;
    add_header Cache-Control public;
  }

  location ^~ /packs/ {
    gzip_static on;
    expires max;
  }

  location = /50x.html {
    root html;
  }

  location @503 {
    error_page 405 = /system/maintenance.html;
    if (-f $document_root/system/maintenance.html) {
      rewrite ^(.*)$ /system/maintenance.html break;
    }
    rewrite ^(.*)$ /503.html break;
  }

  if ($request_method !~ ^(GET|HEAD|PUT|PATCH|POST|DELETE|OPTIONS)$ ){
    return 405;
  }

  if (-f $document_root/system/maintenance.html) {
    return 503;
 }
}

这是我在 sites-enabled 中的配置。正如我所说的，如果我尝试 Nginx -T，配置就会加载。

为什么？

答案1

你有一个完整的server块，next.dday.it它只提供静态文件：

server {
    listen 443 ssl http2;
    listen [::]:443 ssl http2; 
    server_name next.dday.it;
}

它没有文档root，因此使用默认文档：/etc/nginx/html。

我猜你应该server_name在下一个 server块，它没有证书，但是已经为其配置了 SSL 证书next.dday.it。

我会将其移动server_name到下一个server块，然后删除这个块的剩余部分。

相关内容