Hi,

I am running nginx version: nginx/1.20.1 on CentOS Linux release 7.9.2009
(Core). When I am accessing
https://dsmadeveloperportal.mydomain.com/sites/default/files/2020-08/dsmaAccount%20and%20Transaction%20API%20Specification_2_1.yml,
I am encountering 404 Not Found while accessing it. On the server, the
file is there

#ls -l
"/var/www/html/dacdeveloperportal/web/sites/default/files/2020-08/dsmaAccount
and Transaction API Specification_2_1.yml"
-rwxrwxrwx 1 nginx nginx 418867 Aug 2 05:21
/var/www/html/dacdeveloperportal/web/sites/default/files/2020-08/dsmaAccount
and Transaction API Specification_2_1.yml

[root@dsmadeveloperportal web]#pwd
/var/www/html/dsmadeveloperportal/web
[root@dsmadeveloperportal web]# ls -l
total 44
-rw-rw-r-- 1 nginx nginx 385 Jul 12 14:21 autoload.php
drwxr-xr-x 12 nginx nginx 4096 Jul 28 11:52 core
-rw-r--r-- 1 nginx nginx 1507 Jul 28 11:53 example.gitignore
-rw-rw-r-- 1 nginx nginx 549 Jul 12 14:21 index.php
-rw-r--r-- 1 nginx nginx 95 Jul 28 11:53 INSTALL.txt
drwxrwxr-x 6 nginx nginx 77 Jul 28 11:53 libraries
drwxrwxr-x 4 nginx nginx 69 Jul 28 11:53 modules
drwxrwxr-x 2 nginx nginx 40 Jul 28 11:53 profiles
-rw-r--r-- 1 nginx nginx 5924 Jul 28 11:53 README.txt
-rw-rw-r-- 1 nginx nginx 1594 Jul 12 14:21 robots.txt
drwxrwxr-x 3 nginx nginx 130 Jul 28 11:53 sites
drwxrwxr-x 4 nginx nginx 69 Jul 28 11:53 themes
-rw-rw-r-- 1 nginx nginx 848 Jul 12 14:21 update.php
-rw-rw-r-- 1 nginx nginx 4566 Jul 12 14:21 web.config
[root@dacdeveloperportal web]#

*nginx config*
> #cat /etc/nginx/conf.d/dsmadeveloperportal.conf
> server {
> listen 80 default_server;
> server_name dsmadeveloperportal.mydomain.com;
> return 301 https://$server_name$request_uri;



}

server {
listen 443 ssl;
server_name dsmadeveloperportal.mydomain.com;
ssl_protocols TLSv1.3 TLSv1.2;
ssl_stapling on;
ssl_stapling_verify on;
ssl_certificate /etc/ssl/certs/
dsmadeveloperportal.mydomain.com/fullchain1.pem;
ssl_certificate_key /etc/ssl/certs/
dsmadeveloperportal.mydomain.com/privkey1.pem;
ssl_ciphers
ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384;
root /var/www/html/dsmadeveloperportal/web;
ssl_prefer_server_ciphers on;
ssl_dhparam /etc/ssl/certs/
dsmadeveloperportal.mydomain.com/dhparam.pem;
add_header Strict-Transport-Security: max-age=63072000;
proxy_busy_buffers_size 512k;
proxy_buffers 4 512k;
proxy_buffer_size 256k;
index index.php index.html index.htm;


location = /favicon.ico {
log_not_found off;
access_log off;
}

location = /robots.txt {
allow all;
log_not_found off;
access_log off;
}

location ~ \..*/.*\.php$ {
return 403;
}

#location ~ ^/sites/.*/private/ {
# return 403;
#}

# Block access to scripts in site files directory
location ~ ^/sites/[^/]+/files/.*\.php$ {
deny all;
}

# Allow "Well-Known URIs" as per RFC 5785
location ~* ^/.well-known/ {
allow all;
}

# Block access to "hidden" files and directories whose names begin with
a
# period. This includes directories used by version control systems such
# as Subversion or Git to store control files.
location ~ (^|/)\. {
return 403;
}


location / {
# try_files $uri @rewrite; # For Drupal <= 6
try_files $uri /index.php?$query_string; # For Drupal >= 7
}

location @rewrite {
rewrite ^/(.*)$ /index.php?q=$1;
}

# Don't allow direct access to PHP files in the vendor directory.
location ~ /vendor/.*\.php$ {
deny all;
return 404;
}

# Protect files and directories from prying eyes.
location ~*
\.(engine|inc|install|make|module|profile|po|sh|.*sql|theme|twig|tpl(\.php)?|xtmpl|yml)(~|\.sw[op]|\.bak|\.orig|\.save)?$|^(\.(?!well-known).*|Entries..*|Repository|Root|Tag|Template|composer\.(json|lock)|web\.config)$|^#.*#$|\.php(~|\.sw[op]|\.bak|\.orig|\.save)$
{
deny all;
return 404;
}

location ~ \.php$ {
include fastcgi.conf;
fastcgi_pass 127.0.0.1:9000;
fastcgi_read_timeout 300s;
fastcgi_buffers 16 16k;
fastcgi_buffer_size 32k;
}

location ^~ /core/install.php {
deny all;
}
}

Please suggest. Thanks in advance and I look forward to hearing from you.

Best Regards,

Kaushal
_______________________________________________
nginx mailing list
nginx@nginx.org
http://mailman.nginx.org/mailman/listinfo/nginx