Need help setting up WordPress? Using cgi? Something else? Post it here.http://forum.nginx.org/list.php?11Sat, 25 May 2013 18:14:32 -0400 Phorum 5.2.16 http://forum.nginx.org/read.php?11,239534,239534#msg-239534 http://forum.nginx.org/read.php?11,239534,239534#msg-239534
Im very new to nginx and got very lost with its configuration, what i am trying to achive in a vmware enviroment is to have 2 Debian servers 1st is master 2nd is a slave/backup running of 1 internet conection, behind these servers are 10 debian virtualmachines each running ther own Apache with wordpress and group-office webmail and there own domain names eg: mysite.dvrdns.org with static internal ip addresses eg: 192.168.101 - 192.168.110.

1: How do i configure the first 2 servers as master/slave with nginx to forward requests on to the appropriate virtualmachine.

2: what needs to be done on the virtualmachines to accept the requests from the first 2 master/slave servers.

I have attached immage of topology.]]> sgtwirehead How to...Sat, 25 May 2013 06:14:32 -0400 http://forum.nginx.org/read.php?11,239531,239531#msg-239531 http://forum.nginx.org/read.php?11,239531,239531#msg-239531
I used Nginx1.3.8 with SPDY but did not use ssl (I have modified source code to support it).
Nginx server is used as reverse-proxy ,backend is Varnish as cache server.

I access Nginx with chrome brower. first, open a web page A, then quickly open several other web pages B, C, D, E, F, G, H, I, during these web pages are freshing, refresh the web page A. some resources, which its http response status is 304, but its waiting time is long, even spent more than 10 seconds.

from debug log, I found that writer handler is not run at once but delay a while, and I don't know why:
Line 353292: 2013/05/23 16:17:56 [debug] 23678#0: *20 spdy finalize request: -2, "/dy/deco/2012/0914/w0914_news_zyc_newLogo.gif.acce.ic.hKuTaTT3V5.png?" a:1, c:1
Line 429838: 2013/05/23 16:18:06 [debug] 23678#0: *20 spdy run request: "/dy/deco/2012/0914/w0914_news_zyc_newLogo.gif.acce.ic.hKuTaTT3V5.png?"
Line 429839: 2013/05/23 16:18:06 [debug] 23678#0: *20 spdy writer handler: "/dy/deco/2012/0914/w0914_news_zyc_newLogo.gif.acce.ic.hKuTaTT3V5.png?"

configure:
./configure --prefix=/nginx_path/proxy/nginx/ \
--sbin-path=/nginx_path/proxy/nginx/sbin/ \
--conf-path=/nginx_path/proxy/nginx/nginx.conf \
--pid-path=/nginx_path/proxy/nginx/nginx.pid \
--error-log-path=/nginx_path/proxy/nginx/log/error.log \
--http-log-path=/nginx_path/proxy/nginx/log/access.log \
--with-poll_module --with-pcre=/nginx_path/proxy/pcre-8.31 \
--with-pcre-jit --with-zlib=/nginx_path/proxy/zlib-1.2.7 \
--with-debug --add-module=src/third_party/nginx_upstream_hash-0.3.1

debug info and nginx.conf are include in error.tar.gz

and my SUSE linux system is:

linux-fast-1:~> uname -a
Linux vm91221 2.6.32.54-0.3-xen #1 SMP 2012-01-27 17:38:56 +0100 x86_64 x86_64 x86_64 GNU/Linux

linux-fast-1:~ # lsb_release -a
LSB Version: core-2.0-noarch:core-3.2-noarch:core-4.0-noarch:core-2.0-x86_64:core-3.2-x86_64:core-4.0-x86_64:desktop-4.0-amd64:desktop-4.0-noarch:graphics-2.0-amd64:graphics-2.0-noarch:graphics-3.2-amd64:graphics-3.2-noarch:graphics-4.0-amd64:graphics-4.0-noarch
Distributor ID: SUSE LINUX
Description: SUSE Linux Enterprise Server 11 (x86_64)
Release: 11
Codename: n/a]]> tianxinshi How to...Sat, 25 May 2013 04:48:53 -0400 http://forum.nginx.org/read.php?11,239512,239512#msg-239512 http://forum.nginx.org/read.php?11,239512,239512#msg-239512
I don't mean to sound evil. I am trying to give free internet to my users and want to insert ad's in the internet traffic. Hoping the revenue will help support free internet. I want to use Nginx as a Cache Proxy instead of Squid. I came across mod_layout in Apache, which I understand, inserts ad's in Header and Footer dynamically. I like Nginx as it feels faster than Apache.

Would appreciate any advice.

Cheers]]> hdavy2002 How to...Fri, 24 May 2013 09:49:22 -0400 http://forum.nginx.org/read.php?11,239508,239508#msg-239508 http://forum.nginx.org/read.php?11,239508,239508#msg-239508
Physical server 1:

server {
server_name example.com www.example.com;

location / {
proxy_pass http://1.1.1.1:50493;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header Host "example.com";
}
}



Physical Server 2:

server {
listen 50493;
server_name example.com www.example.com;

set_real_ip_from 1.1.1.1;

root /var/www/example.com;
index index.php index.htm index.html;

location / {
if ($http_host !~ "^example.com"){
set $rule_0 1$rule_0;
}
if ($rule_0 = "1"){
rewrite ^/(.*) http://example.com/$1 permanent;
}
rewrite /[^/]+/([0-9]+)-[^/]+.html http://example.com/showthread.php?t=$1 permanent;
}

location ~ .php$ {
fastcgi_pass 127.0.0.1:9000;
fastcgi_index index.php;
fastcgi_param SCRIPT_FILENAME /var/www/example.com$fastcgi_script_name;
include fastcgi_params;
fastcgi_read_timeout 600s;
fastcgi_buffer_size 512k;
fastcgi_buffers 16 512k;
}
}


Generally, browsing works fine. The site is browsable as one expects. However some links that redirect (eg. after a login action), redirect to a link with the port 50493 included. So we get http://example.com:50493/index.php for example. That will not work. My question is, how do I remove the port in such cases?]]> zibralis How to...Fri, 24 May 2013 07:34:02 -0400 http://forum.nginx.org/read.php?11,239491,239491#msg-239491 http://forum.nginx.org/read.php?11,239491,239491#msg-239491
I had a VPS running with nginx and the following file, but then I HAD to delete the installed operating system and reinstall Arch Linux. It was working with THIS EXACT configuration file (nginx.conf) and now after I reinstalled the VPS and reuploaded the same exact conf file (I made a backup of it before reinstalling) it refuses to work. When I "`sudo systemctl restart nginx`", it gives me the following error: `"Job for nginx.service failed. See 'systemctl status nginx.service' and 'journalctl -xn' for details."`

This is the conf file I am referring to:

#user html;
worker_processes 4;

#error_log logs/error.log;
#error_log logs/error.log notice;
#error_log logs/error.log info;

#pid logs/nginx.pid;


events {
worker_connections 1024;
}


http {
include mime.types;
default_type application/octet-stream;

#log_format main '$remote_addr - $remote_user [$time_local] "$request" '
# '$status $body_bytes_sent "$http_referer" '
# '"$http_user_agent" "$http_x_forwarded_for"';

#access_log logs/access.log main;

sendfile on;
#tcp_nopush on;

#keepalive_timeout 0;
keepalive_timeout 65;

gzip on;

server {
listen 80;
server_name localhost;

#charset koi8-r;

#access_log logs/host.access.log main;

location / {
root /usr/share/nginx/html;
index index.html index.htm index.php;
}

#error_page 404 /404.html;


error_page 500 502 503 504 /50x.html;
location = /50x.html {
root /usr/share/nginx/html;
}

location ~ \.php$ {
fastcgi_pass unix:/var/run/php-fpm/php-fpm.sock;
fastcgi_index index.php;
root /usr/share/nginx/html;
include fastcgi.conf;
}

location ~ /\.ht {
deny all;
}
}


server {
listen 80;
server_name www.brackishmedia.com brackishmedia.com;

#charset koi8-r;

#access_log logs/host.access.log main;

location / {
root /usr/share/nginx/brackishmedia.com/html;
index index.html index.htm index.php;
}

#error_page 404 /404.html;


error_page 500 502 503 504 /50x.html;
location = /50x.html {
root /usr/share/nginx/html;
}

location ~ \.php$ {
fastcgi_pass unix:/var/run/php-fpm/php-fpm.sock;
fastcgi_index index.php;
root /usr/share/nginx/brackishmedia.com/html;
include fastcgi.conf;
}

location ~ /\.ht {
deny all;
}
}

include /usr/share/nginx/rescuechurchmiami.com/conf/*;

}


If I remove the following part:

server {
listen 80;
server_name www.brackishmedia.com brackishmedia.com;

#charset koi8-r;

#access_log logs/host.access.log main;

location / {
root /usr/share/nginx/brackishmedia.com/html;
index index.html index.htm index.php;
}

#error_page 404 /404.html;


error_page 500 502 503 504 /50x.html;
location = /50x.html {
root /usr/share/nginx/html;
}

location ~ \.php$ {
fastcgi_pass unix:/var/run/php-fpm/php-fpm.sock;
fastcgi_index index.php;
root /usr/share/nginx/brackishmedia.com/html;
include fastcgi.conf;
}

location ~ /\.ht {
deny all;
}
}

include /usr/share/nginx/rescuechurchmiami.com/conf/*;

and do a `sudo systemctl restart nginx`, it works perfectly. However, I need those that other server block in there and that `include /usr/share/nginx/rescuechurchmiami.com/conf/*;` goes to a configuration file that is specifically for a WordPress install.

So these are the issues I am having. Any suggestions on fixing it? I don't even understand why it won't just work like it did on the former VPS anyway.

Thank you,
AJ]]> ajcr How to...Fri, 24 May 2013 04:09:47 -0400 http://forum.nginx.org/read.php?11,239489,239489#msg-239489 http://forum.nginx.org/read.php?11,239489,239489#msg-239489
Notice the /.80

In our nginx conf for our site we have this access rule: location ~ /\.ht { deny all; log_not_found off; access_log off; }

This rule produces this error in the logs: error.log: access forbidden by rule, server: oursite.tld, request: "GET /demand/change_db_value/18050/13/.80/0/cost HTTP/1.1"

We want to of course block access to any .htaccess files or files beginning with ".", but how do we make an exception for this particular url structure?]]> usazelf How to...Fri, 24 May 2013 04:07:38 -0400 http://forum.nginx.org/read.php?11,239429,239429#msg-239429 http://forum.nginx.org/read.php?11,239429,239429#msg-239429
I have a Nginx as a reverse proxy for my Java application. The Nginx is configured with SSL to communicate with the outside and talk plain http with my Java application. This means that the redirects needs to be rewritten by Nginx in order to prevent the Location header to start with http://.

However, there is one redirect (that redirects users to an identity provider on Internet) where I do not wish to rewrite the Location header at all. And in some way, I can't make this work. The idp is an idp to use in dev-mode and thus the call is not encrypted.

I need some guidance in how to configure Nginx to support the scenario described above. My current configuration looks like:

server {
...
location / {
proxy_pass http://127.0.0.1:8080;
proxy_set_header Host $host;
proxy_redirect http:// https://;
}
}

The url http://127.0.0.1:8080/oauth/authorize responds with a 302 Location https://external-idp.com but I want it to be http://external-idp.com. In my Java application the logs clearly says that "Redirecting to http://external-idp.com" so Nginx rewrites this header to https:// which is expected due to my configuration but what changes is needed to make the proxy_redirect not applicable on all paths?

/Marcus]]> marcuskrantz How to...Wed, 22 May 2013 11:26:08 -0400 http://forum.nginx.org/read.php?11,239423,239423#msg-239423 http://forum.nginx.org/read.php?11,239423,239423#msg-2394232013/05/22 13:00:54 [error] 5238#0: *236951627 connect() failed (110: Connection timed out) while connecting to upstream, client: 192.168.0.72, server: testopenfire.fdautotest.com, request: "GET /login.jsp HTTP/1.1", upstream: "http://192.168.1.46:9090/login.jsp", host: "testopenfire.fdautotest.com"
2013/05/22 13:05:45 [error] 5236#0: *237448096 recv() failed (104: Connection reset by peer) while reading response header from upstream, client: 192.168.0.72, server: test201.fdautotest.com, request: "GET /botAssist/ HTTP/1.1", upstream: "http://192.168.4.201:8081/botAssist/", host: "test201.fdautotest.com"

nginx.conf:
#user nobody;
worker_processes 8;
worker_cpu_affinity 00000001 00000010 00000100 00001000 00010000 00100000 01000000 10000000;
#error_log logs/error.log;
#error_log logs/error.log notice;
#error_log logs/error.log info;
#pid logs/nginx.pid;
worker_rlimit_nofile 65535;
events {
use epoll;
worker_connections 65535;
}
http {
include mime.types;
default_type application/octet-stream;
server_names_hash_bucket_size 128;
client_header_buffer_size 4k;
large_client_header_buffers 4 16k;
client_max_body_size 300m;
open_file_cache max=65535 inactive=60s;
open_file_cache_min_uses 1;
open_file_cache_valid 30s;
tcp_nodelay on;
tcp_nopush on;
proxy_connect_timeout 500;
proxy_read_timeout 500;
proxy_send_timeout 500;
proxy_buffer_size 64k;
proxy_buffers 4 32k;
proxy_busy_buffers_size 64k;
proxy_temp_file_write_size 64k;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
#log_format main '$remote_addr - $remote_user [$time_local] "$request" '
# '$status $body_bytes_sent "$http_referer" '
# '"$http_user_agent" "$http_x_forwarded_for"';
#access_log logs/access.log main;
sendfile on;
keepalive_timeout 120;
include serverconfs/*;
server {
listen 80;
server_name localhost;
location / {
#root html;
#index ip.html index.html index.htm;
proxy_pass http://192.168.7.118:8083/;
}
error_page 500 502 503 504 /50x.html;
location = /50x.html {
root html;
}
}
}

serverconfs/test201.fdautotest.com(other included files are similar to test201.fdautotest.com):
server {
listen 80;
server_name test201.fdautotest.com;
location /botAssist/ {
proxy_pass http://192.168.4.201:8081/botAssist/;
}
location / {
proxy_pass http://192.168.4.201:8081/;
}
location /admin {
return 404;
}
location /manager/html {
return 404;
}
}

/etc/sysctl.conf:
# Kernel sysctl configuration file for Red Hat Linux
#
# For binary values, 0 is disabled, 1 is enabled. See sysctl(8) and
# sysctl.conf(5) for more details.
net.ipv4.conf.eth0.arp_ignore=1
net.ipv4.conf.eth0.arp_announce=1
kernel.sysrq = 0
kernel.core_uses_pid = 1
kernel.msgmnb = 65536
kernel.msgmax = 65536
kernel.shmmax = 68719476736
kernel.shmall = 4294967296
net.core.wmem_default = 8388608
net.core.rmem_default = 8388608
net.core.rmem_max = 16777216
net.core.wmem_max = 16777216
net.core.netdev_max_backlog = 262144
net.core.somaxconn = 262144
net.ipv4.ip_forward = 0
net.ipv4.conf.default.rp_filter = 1
net.ipv4.conf.default.accept_source_route = 0
net.ipv4.tcp_max_tw_buckets = 60000
net.ipv4.tcp_sack = 1
net.ipv4.tcp_window_scaling = 1
net.ipv4.tcp_rmem = 4096 87380 4194304
net.ipv4.tcp_wmem = 4096 16384 4194304
net.ipv4.tcp_max_orphans = 3276800
net.ipv4.tcp_max_syn_backlog = 262144
net.ipv4.tcp_timestamps = 0
net.ipv4.tcp_synack_retries = 1
net.ipv4.tcp_syn_retries = 1
net.ipv4.tcp_tw_recycle = 1
net.ipv4.tcp_tw_reuse = 1
net.ipv4.tcp_syncookies = 1
net.ipv4.tcp_mem = 94500000 915000000 927000000
net.ipv4.tcp_fin_timeout = 30
net.ipv4.tcp_keepalive_time = 30
net.ipv4.ip_local_port_range = 1024 65000
net.nf_conntrack_max = 655360
net.netfilter.nf_conntrack_tcp_timeout_established = 1200

Do you have any solutions?]]> pan How to...Wed, 22 May 2013 05:33:58 -0400 http://forum.nginx.org/read.php?11,239364,239364#msg-239364 http://forum.nginx.org/read.php?11,239364,239364#msg-239364
I have tried EVERYTHING. Also I have thoroughly searched the forum and google and no, none of the solutions worked. I have a VPS with DigitalOcean (great provider, btw) and I have mariadb, nginx, and php-fpm running perfectly. Everything works. However, I can't get phpmyadmin to work. I have followed the wiki ([url]https://wiki.archlinux.org/index.php/PhpMyAdmin#Nginx_Configuration[/url]) and it still doesn't work. I keep getting a 403 error. I would provide you with a domain name but I haven't tied one to the VPS yet. Here is the IP address: [url]http://198.199.86.65/phpmyadmin/[/url]

My root directory is /usr/share/nginx/html and if I run an ls /usr/share/nginx/html command I get the following back:
index.html phpmyadmin

the directory is obviously there.

My nginx.conf file reads as such:
`
#user html;
worker_processes 1;

#error_log logs/error.log;
#error_log logs/error.log notice;
#error_log logs/error.log info;

#pid logs/nginx.pid;


events {
worker_connections 1024;
}


http {
include mime.types;
default_type application/octet-stream;

#log_format main '$remote_addr - $remote_user [$time_local] "$request" '
# '$status $body_bytes_sent "$http_referer" '
# '"$http_user_agent" "$http_x_forwarded_for"';

#access_log logs/access.log main;

sendfile on;
#tcp_nopush on;

#keepalive_timeout 0;
keepalive_timeout 65;

gzip on;

server {
listen 80;
server_name localhost;

#charset koi8-r;

#access_log logs/host.access.log main;

location / {
root /usr/share/nginx/html;
index index.html index.htm;
}

#error_page 404 /404.html;

# redirect server error pages to the static page /50x.html
#
error_page 500 502 503 504 /50x.html;
location = /50x.html {
root /usr/share/nginx/html;
}

# proxy the PHP scripts to Apache listening on 127.0.0.1:80
#
location ~ \.php$ {
fastcgi_pass unix:/var/run/php-fpm/php-fpm.sock;
fastcgi_index index.php;
root /usr/share/nginx/html;
include fastcgi.conf;
}


# pass the PHP scripts to FastCGI server listening on 127.0.0.1:9000
#
#location ~ \.php$ {
# root html;
# fastcgi_pass 127.0.0.1:9000;
# fastcgi_index index.php;
# fastcgi_param SCRIPT_FILENAME /scripts$fastcgi_script_name;
# include fastcgi_params;
#}

# deny access to .htaccess files, if Apache's document root
# concurs with nginx's one
#
#location ~ /\.ht {
# deny all;
#}
}

server {
listen 80;
server_name localhost;

root /usr/share/nginx/html/phpmyadmin;
index index.php;
fastcgi_index index.php;

location ~ \.php$ {
include /etc/nginx/fastcgi.conf;
fastcgi_param SCRIPT_FILENAME /usr/share/nginx/html/phpmyadmin$fastcgi_script_name;
fastcgi_pass unix:/var/run/php5-fpm.sock;
}


}

# another virtual host using mix of IP-, name-, and port-based configuration
#
#server {
# listen 8000;
# listen somename:8080;
# server_name somename alias another.alias;

# location / {
# root html;
# index index.html index.htm;
# }
#}


# HTTPS server
#
#server {
# listen 443;
# server_name localhost;

# ssl on;
# ssl_certificate cert.pem;
# ssl_certificate_key cert.key;

# ssl_session_timeout 5m;

# ssl_protocols SSLv2 SSLv3 TLSv1;
# ssl_ciphers HIGH:!aNULL:!MD5;
# ssl_prefer_server_ciphers on;

# location / {
# root html;
# index index.html index.htm;
# }
#}

}
`

Any help would be greatly appreciated.]]> ajcr How to...Mon, 20 May 2013 21:57:02 -0400 http://forum.nginx.org/read.php?11,239321,239321#msg-239321 http://forum.nginx.org/read.php?11,239321,239321#msg-239321I use nginx 1.4.1 from 1-2 weeks and i'm realy happy with it. I have the following question.
I have configured 4 virtual hosts (servers).

First is default_server which is for all non-configured domains (sub-domains) that are configured with my DNS server (A records).
Second one is my main website with ports 80 and 443. other two are one with both ports ssl and non-ssl and last one is only port 80.
My question is : how i can disable port 443 for virtual hosts that use only port 80. by the now if i type it's domain with https:// it redirects me to my main site and i want to stop that somehow.

So is it possible to be done.

Kind regards.]]> icnseo How to...Tue, 21 May 2013 05:44:24 -0400 http://forum.nginx.org/read.php?11,239303,239303#msg-239303 http://forum.nginx.org/read.php?11,239303,239303#msg-239303
http://mydomain.com/username/

within the system of query should look like:

http://mydomain.com/users/?username=username

Q: How to convert (handle) queries like: mydomain.com/username ?]]> Sergey Kozlov How to...Fri, 17 May 2013 16:26:58 -0400 http://forum.nginx.org/read.php?11,239302,239302#msg-239302 http://forum.nginx.org/read.php?11,239302,239302#msg-239302
root :to => "authentify::sessions#new"
match '/signin', :to => 'authentify::sessions#new'
match '/signout', :to => 'authentify::sessions#destroy'
match '/user_menus', :to => 'user_menus#index'
match '/view_handler', :to => 'authentify::application#view_handler'

The app is deployed to base uri nbhy running on ubuntu 12.04 with passenger and nginx. On the same server, there is another rails app running in its own sub uri. Here is the configuration in nginx.conf for sub uri nbhy:

server {
listen 80;
server_name 6.95.225.93;
root /var/www/;
passenger_enabled on;
rails_env production;
passenger_base_uri /by;
passenger_base_uri /nbhy;

#for rails >=3.1, assets pipeline
location ~ ^/assets/ {
expires max;
add_header Cache-Control public;
add_header ETag "";
break;
}
}

Also a symlink nbhy is created at document root /var/www pointing to /var/www/nbhyop/current/public. Here is the output of the root /var/www/:

total 8
lrwxrwxrwx 1 cjadmin www-data 28 Nov 3 2012 by -> /var/www/byop/current/public
drwxrwsr-x 4 cjadmin www-data 4096 Nov 4 2012 byop
lrwxrwxrwx 1 cjadmin www-data 30 May 16 21:27 nbhy -> /var/www/nbhyop/current/public
drwxrwsr-x 4 cjadmin www-data 4096 May 14 15:21 nbhyop

The by is the first rails app deployed to the sub URI and is working fine.

The login page is displayed after typing http://6.95.225.93/nbhy. After key in user and password, the page was redirected to http://6.95.225.93/authentify/session with 404 Not Found error. There is an error found in nginx error.log:

2013/05/13 16:29:25 [error] 2384#0: *1 open() "/var/www/authentify/session" failed (2: No such file or directory), client: 192.168.1.1, server: 6.95.225.93, request: "POST /authentify/session HTTP/1.1", host: "6.95.225.93", referrer: "http://6.95.225.93/nbhy/"

Obviously /var/www/authentify/session will not hit the right page because it is missing the base uri nbhy between www and authentify. Based on our analysis, the create in authentify session controller hasn't been hit and the user hasn't been authenticated even with the right user name and password at http://6.95.225.93/nbhy.

Also find out that a user can login at http://6.95.225.93/nbhy/authentify/session/new with some twist. After login the page will be redirected to http://6.95.225.93/user_menus which will throw out 404 Not Found error. However if we insert nbhy in between as : http://6.95.225.93/nbhy/user_menus, then it will bring up the user menus page successfully. For any further click on links, manually inserting nbhy will make the link work (if nbhy is missing).

The rails app worked fine when deploying without sub uri.

Why the sub uri is missing from route? Is there a way we can make the nbhy here to stay and eliminate the error? Thanks for help.]]> emclab How to...Fri, 17 May 2013 14:18:37 -0400 http://forum.nginx.org/read.php?11,239293,239293#msg-239293 http://forum.nginx.org/read.php?11,239293,239293#msg-239293
Many thanks.]]> really_there How to...Fri, 17 May 2013 08:53:03 -0400 http://forum.nginx.org/read.php?11,239291,239291#msg-239291 http://forum.nginx.org/read.php?11,239291,239291#msg-239291
I posted a question on server fault on how to preserve the headers I set in the Django backend.
It seems as nginx "removes" the headers I have set in a Django middleware.

I described my problem in detail here:

http://serverfault.com/questions/508524/preserve-http-headers-from-django-using-nginx-and-gunicorn


Hope to get some help here. Thanks in advance!
Thomas]]> tomtom How to...Fri, 17 May 2013 07:57:10 -0400 http://forum.nginx.org/read.php?11,239246,239246#msg-239246 http://forum.nginx.org/read.php?11,239246,239246#msg-239246
Config extracts:

gzip off;
tcp_nodelay on;
...
server {
listen 443;
location / {
proxy_buffering off;
proxy_pass http://backend-server:443;
}]]> u848237 How to...Wed, 15 May 2013 12:29:11 -0400 http://forum.nginx.org/read.php?11,239231,239231#msg-239231 http://forum.nginx.org/read.php?11,239231,239231#msg-239231
i'm a newbie on Nginx and i have this problem :

We have Nginx as reverseproxy who point on a Java server (Platform play) - That's ok and work well :

https://www.toto.fr

Now we would like to point to our Nagios server when we enter this URL https://www.toto.fr/supervision/

For this, i have this block :

location /supervision {
proxy_pass http://IP_SERVER_NAGIOS/nagios/;
proxy_redirect off;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Ssl on;
access_log /var/log/nginx/supervision.access.log;
}

That's work too ! I access well on the start page of Nagios. But when i click on another link of Nagios web interface, Nginx doesn't find the pages because the links point to http://www.toto.fr/nagios/cgi-bin/.... and not to http://www.toto.fr/supervision/cgi-bin/...

What is the way to resolve this problem ? an 'if' condition, a rewrite URL, a new location block ? Can you help me please ?

Thanks

Doctau]]> doctau How to...Wed, 15 May 2013 12:11:06 -0400 http://forum.nginx.org/read.php?11,239227,239227#msg-239227 http://forum.nginx.org/read.php?11,239227,239227#msg-239227
Существует необходимость проверить на входжение некоторую системную переменную:

root /www/public_html;

include /etc/nginx/fastcgi_params;
fastcgi_pass fpm_server;
fastcgi_index index.php;
fastcgi_param SCRIPT_FILENAME //index.php;
fastcgi_param SCRIPT_NAME '';
fastcgi_param QUERY_STRING $args;
fastcgi_param PATH_INFO $uri;

#set $fake_ip 111.222.333.444;

fastcgi_param HTTP_X_REAL_IP $remote_addr;

if ($remote_addr = 192.168.*) {
fastcgi_param HTTP_X_FORWARDED_FOR $remote_addr;
}

Однако использовать как я понимаю fastcgi_param внутри if-а нельзя. Как же быть в данном случае, в котором мне надо проверить, что $remote_addr равно 192.168.*, а остальные должны быть отвергнуты и X-Forwarder-For должен остаться пустым.

Заранее благодарен!]]> plushka How to...Wed, 15 May 2013 08:21:13 -0400 http://forum.nginx.org/read.php?11,239226,239226#msg-239226 http://forum.nginx.org/read.php?11,239226,239226#msg-239226
I'm starting with nginx, and I have some problems with resize of pictures. And when I'm trying my conf, I see I did not realy undersand some basic concepts.

My first problem :
I have a url like this : http://localhost/media/test/titi/toto.jpg
And it works good with this configuration :
location ~ /media/test/(.*) {
alias /var/www/html/toto/$1;
}

But it doen't work with this config.
location ~ /media/test/(.*) {
root /var/www/html/toto;
}
I don't understand why ?

My second problem is about resize. Why did it not work ?

location ~ /media/test/(.*) {
image_filter resize 50 10;
alias /var/www/html/toto/$1;
}

Thanks for your help.


Eric]]> elhostis How to...Wed, 15 May 2013 10:24:45 -0400 http://forum.nginx.org/read.php?11,239201,239201#msg-239201 http://forum.nginx.org/read.php?11,239201,239201#msg-239201I'm happy to join NGINX community and want to share with you with my little problem.

I've got wildcard entry for example.com in my DNS which points all subdomains to some machine
* IN A 172.172.172.172
While NGINX configuration for this domain contains only actively used subdomain names
server {
listen 10.0.0.1:80;
server_name example.com www.example.com
moskva.example.com www.moskva.example.com
tokyo.example.com www.tokyo.example.com
...
}
What I want to achieve is directing all unconfigured subdomains like 'mistake.example.com' to specific address.
Is there any elegant way of solving this problem?

Best Regards
Arek]]> vonHerman How to...Wed, 15 May 2013 12:05:47 -0400 http://forum.nginx.org/read.php?11,239197,239197#msg-239197 http://forum.nginx.org/read.php?11,239197,239197#msg-239197
If you type in www.agencialojavirtual.br it goes to www.institutoprana.com.br.

What can I do to make the appropriate requests to go correctly to each domain?

server {
listen 80;


root /var/www/prana;
index index.php index.html index.htm;

server_name institutoprana.com.br;

location / {
try_files $uri $uri/ /index.php?q=$uri&$args;
}

error_page 404 /404.html;

error_page 500 502 503 504 /50x.html;
location = /50x.html {
root /usr/share/nginx/www;
}

# pass the PHP scripts to FastCGI server listening on 127.0.0.1:9$
location ~ \.php$ {
#fastcgi_pass 127.0.0.1:9000;
# With php5-fpm:
fastcgi_pass unix:/var/run/php5-fpm.sock;
fastcgi_index index.php;
include fastcgi_params;
}

location /phpmyadmin {
root /usr/share/;
index index.php index.html index.htm;
location ~ ^/phpmyadmin/(.+\.php)$ {
try_files $uri =404;
root /usr/share/;
#fastcgi_pass 127.0.0.1:9000;
fastcgi_pass unix:/var/run/php5-fpm.sock;
fastcgi_index index.php;
fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
#include /etc/nginx/fastcgi_params;
include fastcgi_params;
}
location ~* ^/phpmyadmin/(.+\.(jpg|jpeg|gif|css|png|js|ico|html|xml|txt))$ {
root /usr/share/;
}
}
location /phpMyAdmin {
rewrite ^/* /phpmyadmin last;
}
}

server {
listen 80;
root /var/www/retiroaybrasilia;
index index.php index.html index.htm;
server_name agencialojavirtual.com.br;
location / {
try_files $uri $uri/ /index.php?q=$uri&$args;
}


Thank you]]> rodusa How to...Wed, 15 May 2013 08:42:15 -0400 http://forum.nginx.org/read.php?11,239164,239164#msg-239164 http://forum.nginx.org/read.php?11,239164,239164#msg-239164
Using NginX as a reverse proxy, I want to cache the response ONLY if the user has NOT logged in, which can be checked by testing the existence of a cookie.

First I tried to use "if", but NginX complained that I cannot put a proxy_cache_valid inside an "if":

location / {
proxy_pass http://www.xyz.com;
if ($cookie_login = '') {
proxy_cache my-cache;
proxy_cache_valid 200 301 302 60m;
}
}


Then I tried to set the cache-duration to 0s by using a variable, but then NginX complained the time value is incorrect.
set $cacheDuration 60m;
if ($cookie_login != '') {
set $cacheDuration 0s;
}

proxy_cache my-cache;
proxy_cache_valid 200 301 302 $cacheDuration


So is there a way to cache conditionally based on the existence of a cookie?


Thanks.

- Patrick]]> patng323 How to...Tue, 14 May 2013 03:42:32 -0400 http://forum.nginx.org/read.php?11,239163,239163#msg-239163 http://forum.nginx.org/read.php?11,239163,239163#msg-239163location / {

proxy_pass https://$upbackend;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_cache off;
#proxy_buffers 5 2k;
#proxy_buffer_size 2k;
#proxy_buffering on;
}
включение и изменение значений приводит лиш к увеличению времени.
Подскажите что можно включить (отключить) для уменьшения времени обработки. Сами понимаете 0.05мс чего-то ожидать.. весьма неожиданно для меня.
Заранее благодарен!]]> imroot How to...Tue, 14 May 2013 02:56:12 -0400 http://forum.nginx.org/read.php?11,239153,239153#msg-239153 http://forum.nginx.org/read.php?11,239153,239153#msg-239153
I have a network camera and I am using nginx as a reverse proxy to access the camera URL, but I do not want people to be able to access the url directly. I want to include the feed in a site.

So I configured nginx as a reverse proxy using a unix socket:
upstream apm02_unix {
server unix:/tmp/motion_apm02: fail_timeout=0;
}

I chose to use the unix socket in order to protect the feed.

Is it possiable for nginx to server this feed via the reverse proxy unix socket?

Regards
Gregg]]> douglagm How to...Mon, 13 May 2013 13:00:48 -0400 http://forum.nginx.org/read.php?11,239071,239071#msg-239071 http://forum.nginx.org/read.php?11,239071,239071#msg-239071
there are a handful of specific urls that i would like to make available to non-ssl clients via nginx front.

i tried a couple of things but i can't seem to get it to work correctly.

is this possible? if so, can anyone suggest the appropriate config syntax?

any guidance appreciated!]]> tony_k How to...Fri, 10 May 2013 21:28:42 -0400 http://forum.nginx.org/read.php?11,239067,239067#msg-239067 http://forum.nginx.org/read.php?11,239067,239067#msg-239067 x0b How to...Tue, 14 May 2013 05:31:26 -0400 http://forum.nginx.org/read.php?11,239045,239045#msg-239045 http://forum.nginx.org/read.php?11,239045,239045#msg-239045I just moved in nginx and somehow I'm newbe...
I am using my server as a download server. and i need to know how can i disable resume capability for my users in one virtualhost?
I already limit the connections to one per user. but it's not good enough. Tnx]]> nimait70 How to...Tue, 14 May 2013 18:37:52 -0400 http://forum.nginx.org/read.php?11,239020,239020#msg-239020 http://forum.nginx.org/read.php?11,239020,239020#msg-239020
i have a URL like this:

http://www.domain.com/resize.php?pic=images/elements/imagename.jpg&type=300crop

that php checks if that image exists and serves, if not, creates image on disk with the size specified in the type parameter and returns it.

what I wanted is to check if the image exists on disk at that size, with nginx, so run only resize.php when necessary to create the image.

I tried this, but i think that location directive doesn't operate on query parameters ($args) using regex, then loncation does not match with sample URL :(

any help please?

I need to rewrite the parameters ($args) and use them in the try_files directive... is this possible?

-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*

> location ~ "^/resize\.php\?pic=images/(elements|gallery)/(.*)\.jpg&type=([0-9]{1,3}[a-z]{0,4})$)"{
> try_files /images/$1/$2.jpg /imagenes/elements/thumbs/$3_$2.jpg @phpresize;
> }

> location @phpresize {
> try_files $uri =404;
> proxy_set_header Host $host;
> proxy_set_header X-Real-IP $remote_addr;
> proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
> proxy_buffering on;
> proxy_pass http://127.0.0.1:8080;
> }

-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*]]> pepejose How to...Sat, 11 May 2013 05:32:20 -0400 http://forum.nginx.org/read.php?11,238925,238925#msg-238925 http://forum.nginx.org/read.php?11,238925,238925#msg-238925I understand that in the "nginx.conf" file you have to specify the root directiry of your projects? Do I have to do it everytime in every project? Unlike xampp, there's a htdocs folder wher you have to create your projects and just run localhost on the web browser and every folders you have been working on will be displayed there.

Need assistance.]]> jhoiemarie How to...Mon, 06 May 2013 18:11:09 -0400 http://forum.nginx.org/read.php?11,238924,238924#msg-238924 http://forum.nginx.org/read.php?11,238924,238924#msg-238924
The weirdest thing however is that apt-get seems to ignore my wishes and keeps dumping apache warez on the server, whatever I do, I end up in catch-22 situations when I try to remove apache, like apt saying:

The following packages were automatically installed and are no longer required:
libapr1 libaprutil1-ldap locales nginx-common libaprutil1-dbd-sqlite3 geoip-database libgeoip1
liblua5.1-0 libaprutil1 libossp-uuid16 libgd2-noxpm
Use 'apt-get autoremove' to remove them.
The following packages will be REMOVED:
apache2-mpm-worker apache2-utils apache2.2-bin apache2.2-common phpsysinfo squirrelmail
squirrelmail-locales squirrelmail-viewashtml
0 upgraded, 0 newly installed, 8 to remove and 0 not upgraded.
After this operation, 23.1 MB disk space will be freed.
Do you want to continue [Y/n]? n
Abort.

Of course I don't want to remove anything nginx related, when I just want to kill and purge apache off my server!
So why is it doing this?

Another thing is why it wants to remove squirrelmail and phpsysinfo, as if those don't function with nginx? They do just fine thank you very much.

In addition, it keeps re-installing apache2 whenever I try to remove nginx in order to be able to do a clean re-install! It assumes I want apache as a replacement whenever I remove nginx (!?). How do I stop it from forcing apache or lighttpd material down my throat?

Gosh, sometimes linux, especially debian, makes me want to leave everything IT-related and live on an island.
I'll probably end up no longer using dotdeb repos, they only result in messing up my server.]]> liefde How to...Mon, 06 May 2013 17:58:17 -0400 http://forum.nginx.org/read.php?11,238884,238884#msg-238884 http://forum.nginx.org/read.php?11,238884,238884#msg-238884 jhoiemarie How to...Sun, 05 May 2013 23:32:11 -0400