https://quicktasks.ismael.casimpan.com/tags/nginx/Recent content in nginx on IT QuicktasksHugo -- gohugo.ioCopyright © 2018–2022, Ismael Casimpan Jr.; All Rights ReservedMon, 27 Jul 2020 00:20:25 +0800https://quicktasks.ismael.casimpan.com/post/nginx-ssl-pem_read_bio-end-of-line-error/Mon, 27 Jul 2020 00:20:25 +0800https://quicktasks.ismael.casimpan.com/post/nginx-ssl-pem_read_bio-end-of-line-error/ We had this ssl cert issued by Network Solutions 1root@www:/etc/nginx/conf.d/ssl/example-2020# unzip -l EXAMPLE.ORG.zip 2Archive: EXAMPLE.ORG.zip 3Length Date Time Name 4--------- ---------- ----- ---- 52150 2020-07-14 16:59 DV_NetworkSolutionsDVServerCA2.crt 6Network Solutions DV Intermediate CA 72093 2020-07-14 16:59 DV_USERTrustRSACertificationAuthority.crt 8Network Solutions DV Intermediate CA 2 92174 2020-07-14 16:59 EXAMPLE.ORG.crt 10Domain certificate 11--------- ------- 126417 3 files I created a bundle as this was for Nginx cat EXAMPLE.ORG.crt DV_NetworkSolutionsDVServerCA2.crt DV_USERTrustRSACertificationAuthority.crt > www.example.org-bundle.crt When I tried verifying, I got this error:https://quicktasks.ismael.casimpan.com/post/clear-nginx-cache/Fri, 10 Jul 2020 00:20:25 +0800https://quicktasks.ismael.casimpan.com/post/clear-nginx-cache/ bruteforce method - remove and replace /etc/nginx-cache Tool (untested) - https://github.com/perusio/nginx-cache-purgehttps://quicktasks.ismael.casimpan.com/post/comodo-ssl-verification-in-nginx/Fri, 10 Jul 2020 00:20:25 +0800https://quicktasks.ismael.casimpan.com/post/comodo-ssl-verification-in-nginx/ Add the following to the vhost: 1location ^~ /.well-known/ { 2log_not_found off; 3}https://quicktasks.ismael.casimpan.com/post/nginx-502-bad-gateway/Fri, 10 Jul 2020 00:20:25 +0800https://quicktasks.ismael.casimpan.com/post/nginx-502-bad-gateway/ Check if php-fpm service is up Check if being listened to by nginx (for CentOS, look for "listen" in /etc/php-fpm.d/www.conf) Adjust nginx vhost (fastcgi_pass) when necessary (example below) 1fastcgi_pass 127.0.0.1:9000;https://quicktasks.ismael.casimpan.com/post/nginx-hsts/Fri, 10 Jul 2020 00:20:25 +0800https://quicktasks.ismael.casimpan.com/post/nginx-hsts/ Update the following line of code in config file’s server Block. 1add_header Strict-Transport-Security “max-age=63072000; includeSubdomains; “; Restart the NGINX server. More details in https://medium.com/@sslsecurity/how-to-enable-hsts-on-apache-nginx-and-lighttpd-8b0c64155911https://quicktasks.ismael.casimpan.com/post/nginx-proxying-buffering/Fri, 10 Jul 2020 00:20:25 +0800https://quicktasks.ismael.casimpan.com/post/nginx-proxying-buffering/ https://www.digitalocean.com/community/tutorials/understanding-nginx-http-proxying-load-balancing-buffering-and-cachinghttps://quicktasks.ismael.casimpan.com/post/nginx-request-entity-too-large/Fri, 10 Jul 2020 00:20:25 +0800https://quicktasks.ismael.casimpan.com/post/nginx-request-entity-too-large/ Solution: In server block, add "client_max_body_size" directive like the following 1server { 2listen 8080; 3client_max_body_size 100M; 4... 5... 6} See details in https://www.cyberciti.biz/faq/linux-unix-bsd-nginx-413-request-entity-too-large/https://quicktasks.ismael.casimpan.com/post/ocsp-stapling-in-nginx/Fri, 10 Jul 2020 00:20:25 +0800https://quicktasks.ismael.casimpan.com/post/ocsp-stapling-in-nginx/ https://raymii.org/s/tutorials/OCSP_Stapling_on_nginx.htmlhttps://quicktasks.ismael.casimpan.com/post/quick-install-nginx-in-centos7-301-redirect/Fri, 10 Jul 2020 00:20:25 +0800https://quicktasks.ismael.casimpan.com/post/quick-install-nginx-in-centos7-301-redirect/ 1sudo yum install epel-release 2sudo yum install nginx 3sudo systemctl start nginx 4... 5... 6edit /etc/nginx/nginx.conf 78... 9... 10#add this line in bottom of 'server' block: 11Redirect 301 https://your_domain_here/$request_uri; 1213sudo systemctl restart nginx 14sudo systemctl enable nginxhttps://quicktasks.ismael.casimpan.com/post/setup-default-virtualhost-in-nginx/Fri, 10 Jul 2020 00:20:25 +0800https://quicktasks.ismael.casimpan.com/post/setup-default-virtualhost-in-nginx/ 1server { 23listen 80 default_server; 4server_name _; 56root /var/www/default; 78} details in https://serverfault.com/questions/527156/setting-nginx-to-catch-all-unhandled-vhostshttps://quicktasks.ismael.casimpan.com/post/tweaks-improve-nginx/Fri, 10 Jul 2020 00:20:25 +0800https://quicktasks.ismael.casimpan.com/post/tweaks-improve-nginx/ https://scaron.info/blog/improve-your-nginx-ssl-configuration.htmlhttps://quicktasks.ismael.casimpan.com/post/renew-from-nginx-to-apache/Sun, 07 Jun 2020 00:20:25 +0800https://quicktasks.ismael.casimpan.com/post/renew-from-nginx-to-apache/ It's quite expected that certificate won't renew as the automation has been broken. What you can do is install the apache version of certbot 1yum install python-certbot-apache and re-issue the certificate 1sudo certbot --apache -d www.example.orghttps://quicktasks.ismael.casimpan.com/post/nginx-404-when-in-drupal-admin/Mon, 09 Apr 2018 00:20:25 +0800https://quicktasks.ismael.casimpan.com/post/nginx-404-when-in-drupal-admin/ This lacks URL rewriting. See https://www.nginx.com/resources/wiki/start/topics/recipes/drupal/