Ryfujk

Is the destination of a commercial flight important for the pilot?

Why not increase contact surface when reentering the atmosphere?

How does buying out courses with grant money work?

A particular customize with green line and letters for subfloat

How does it work when somebody invests in my business?

Anatomically Correct Strange Women In Ponds Distributing Swords

How can I kill an app using Terminal?

Applicability of Single Responsibility Principle

Customer Requests (Sometimes) Drive Me Bonkers!

Is a stroke of luck acceptable after a series of unfavorable events?

How to pronounce the slash sign

System.debug(JSON.Serialize(o)) Not longer shows full string

I'm in charge of equipment buying but no one's ever happy with what I choose. How to fix this?

Trouble understanding the speech of overseas colleagues

Failed to fetch jessie backports repository

Risk of infection at the gym?

Term for the "extreme-extension" version of a straw man fallacy?

Are student evaluations of teaching assistants read by others in the faculty?

Lay out the Carpet

CREATE opcode: what does it really do?

How can a function with a hole (removable discontinuity) equal a function with no hole?

Is there a good way to store credentials outside of a password manager?

Where does the Z80 processor start executing from?

How did Arya survive the stabbing?

nginx always shows the default page

Nginx has ssl module, but thinks it doesn'tBlank Page: wordpress on nginx+php-fpmNginx subversion commit failureNginx/Apache: set HSTS only if X-Forwarded-Proto is httpsOCSP validation - unable to get local issuer certificatenginx rewrite throw 404 with last and break403 Forbidden nginx (nginx/1.8.0)nginx seems to be ignoring ssl_ciphers settingSSL_read() failed (SSL: error:140943F2:SSL routines:SSL3_READ_BYTES:sslv3 error in nginxNginx reverse proxy to many local servers + webserver duty

0

i set up a nginx webserver with some virtual hosts and a default host (with return 444;) for all unmatched connections.

If i try to visit one of my virtual hosts, i still get the 444.

Here is my nginx.conf:

user www-data;

worker_processes auto;

pid /run/nginx.pid;

include /etc/nginx/modules-enabled/*.conf;



events {

        worker_connections 1024;

        multi_accept on;

}



http {

        sendfile on;

        tcp_nopush on;

        tcp_nodelay on;

        keepalive_timeout 65;

        types_hash_max_size 2048;



        # server_names_hash_bucket_size 64;

        # server_name_in_redirect off;



        include /etc/nginx/mime.types;

        default_type application/octet-stream;





        ssl_dhparam /etc/nginx/ssl/dhparams.pem;

        ssl_protocols TLSv1.2; # Dropping SSLv3, ref: POODLE

        ssl_ciphers 'ECDHE-RSA-AES256-GCM-SHA512:DHE-RSA-AES256-GCM-SHA512:ECDHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-SHA384';

        ssl_prefer_server_ciphers on;



        access_log /var/log/nginx/access.log;

        error_log /var/log/nginx/error.log;



        gzip on;

        gzip_disable "msie6";



        upstream php-handler {

                server unix:/run/php/php7.0-fpm.sock;

        }



        server_tokens off;



        include /etc/nginx/conf.d/*.conf;

        include /etc/nginx/sites-enabled/*;

}

/etc/nginx/sites-enabled/default:

server {

  listen      80 default_server;

  listen     443 default_server;

  server_name _;

  return 444;

  access_log off; log_not_found off;

}

/etc/nginx/sites-enabled/test:

server {

  listen 80;

  listen [::]:80;

  server_name <mydomain.com>;

  return 301 https://$host$request_uri;

}

server {

  listen 443;

  server_name <mydomain.com>;



  ssl on;

  ssl_certificate /etc/acme.sh/<....>/fullchain.cer;

  ssl_certificate_key /etc/acme.sh/<....>/<...>.key;

  ssl_protocols TLSv1 TLSv1.1 TLSv1.2;

  ssl_ciphers HIGH:!aNULL:!MD5;



  location / {

      proxy_pass http://....:8080;

      proxy_set_header Host $http_host;

      proxy_set_header X-Real-IP $remote_addr;

      proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;

      proxy_set_header X-Forwarded-Proto $scheme;

      client_max_body_size 0;

  }

}

Any ideas how to get it working?
btw: if i delete the default one, i can access my virtual host.

Many thanks

nginx

share|improve this question

asked 11 mins ago

MarcelMarcel

1

New contributor

Marcel is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.

add a comment | 

0

i set up a nginx webserver with some virtual hosts and a default host (with return 444;) for all unmatched connections.

If i try to visit one of my virtual hosts, i still get the 444.

Here is my nginx.conf:

user www-data;

worker_processes auto;

pid /run/nginx.pid;

include /etc/nginx/modules-enabled/*.conf;



events {

        worker_connections 1024;

        multi_accept on;

}



http {

        sendfile on;

        tcp_nopush on;

        tcp_nodelay on;

        keepalive_timeout 65;

        types_hash_max_size 2048;



        # server_names_hash_bucket_size 64;

        # server_name_in_redirect off;



        include /etc/nginx/mime.types;

        default_type application/octet-stream;





        ssl_dhparam /etc/nginx/ssl/dhparams.pem;

        ssl_protocols TLSv1.2; # Dropping SSLv3, ref: POODLE

        ssl_ciphers 'ECDHE-RSA-AES256-GCM-SHA512:DHE-RSA-AES256-GCM-SHA512:ECDHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-SHA384';

        ssl_prefer_server_ciphers on;



        access_log /var/log/nginx/access.log;

        error_log /var/log/nginx/error.log;



        gzip on;

        gzip_disable "msie6";



        upstream php-handler {

                server unix:/run/php/php7.0-fpm.sock;

        }



        server_tokens off;



        include /etc/nginx/conf.d/*.conf;

        include /etc/nginx/sites-enabled/*;

}

/etc/nginx/sites-enabled/default:

server {

  listen      80 default_server;

  listen     443 default_server;

  server_name _;

  return 444;

  access_log off; log_not_found off;

}

/etc/nginx/sites-enabled/test:

server {

  listen 80;

  listen [::]:80;

  server_name <mydomain.com>;

  return 301 https://$host$request_uri;

}

server {

  listen 443;

  server_name <mydomain.com>;



  ssl on;

  ssl_certificate /etc/acme.sh/<....>/fullchain.cer;

  ssl_certificate_key /etc/acme.sh/<....>/<...>.key;

  ssl_protocols TLSv1 TLSv1.1 TLSv1.2;

  ssl_ciphers HIGH:!aNULL:!MD5;



  location / {

      proxy_pass http://....:8080;

      proxy_set_header Host $http_host;

      proxy_set_header X-Real-IP $remote_addr;

      proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;

      proxy_set_header X-Forwarded-Proto $scheme;

      client_max_body_size 0;

  }

}

Any ideas how to get it working?
btw: if i delete the default one, i can access my virtual host.

Many thanks

nginx

share|improve this question

asked 11 mins ago

MarcelMarcel

1

New contributor

Marcel is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.

add a comment | 

i set up a nginx webserver with some virtual hosts and a default host (with return 444;) for all unmatched connections.

If i try to visit one of my virtual hosts, i still get the 444.

Here is my nginx.conf:

user www-data;

worker_processes auto;

pid /run/nginx.pid;

include /etc/nginx/modules-enabled/*.conf;



events {

        worker_connections 1024;

        multi_accept on;

}



http {

        sendfile on;

        tcp_nopush on;

        tcp_nodelay on;

        keepalive_timeout 65;

        types_hash_max_size 2048;



        # server_names_hash_bucket_size 64;

        # server_name_in_redirect off;



        include /etc/nginx/mime.types;

        default_type application/octet-stream;





        ssl_dhparam /etc/nginx/ssl/dhparams.pem;

        ssl_protocols TLSv1.2; # Dropping SSLv3, ref: POODLE

        ssl_ciphers 'ECDHE-RSA-AES256-GCM-SHA512:DHE-RSA-AES256-GCM-SHA512:ECDHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-SHA384';

        ssl_prefer_server_ciphers on;



        access_log /var/log/nginx/access.log;

        error_log /var/log/nginx/error.log;



        gzip on;

        gzip_disable "msie6";



        upstream php-handler {

                server unix:/run/php/php7.0-fpm.sock;

        }



        server_tokens off;



        include /etc/nginx/conf.d/*.conf;

        include /etc/nginx/sites-enabled/*;

}

/etc/nginx/sites-enabled/default:

server {

  listen      80 default_server;

  listen     443 default_server;

  server_name _;

  return 444;

  access_log off; log_not_found off;

}

/etc/nginx/sites-enabled/test:

server {

  listen 80;

  listen [::]:80;

  server_name <mydomain.com>;

  return 301 https://$host$request_uri;

}

server {

  listen 443;

  server_name <mydomain.com>;



  ssl on;

  ssl_certificate /etc/acme.sh/<....>/fullchain.cer;

  ssl_certificate_key /etc/acme.sh/<....>/<...>.key;

  ssl_protocols TLSv1 TLSv1.1 TLSv1.2;

  ssl_ciphers HIGH:!aNULL:!MD5;



  location / {

      proxy_pass http://....:8080;

      proxy_set_header Host $http_host;

      proxy_set_header X-Real-IP $remote_addr;

      proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;

      proxy_set_header X-Forwarded-Proto $scheme;

      client_max_body_size 0;

  }

}

Any ideas how to get it working?
btw: if i delete the default one, i can access my virtual host.

Many thanks

nginx

share|improve this question

asked 11 mins ago

MarcelMarcel

1

New contributor

Marcel is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.

user www-data;

worker_processes auto;

pid /run/nginx.pid;

include /etc/nginx/modules-enabled/*.conf;



events {

        worker_connections 1024;

        multi_accept on;

}



http {

        sendfile on;

        tcp_nopush on;

        tcp_nodelay on;

        keepalive_timeout 65;

        types_hash_max_size 2048;



        # server_names_hash_bucket_size 64;

        # server_name_in_redirect off;



        include /etc/nginx/mime.types;

        default_type application/octet-stream;





        ssl_dhparam /etc/nginx/ssl/dhparams.pem;

        ssl_protocols TLSv1.2; # Dropping SSLv3, ref: POODLE

        ssl_ciphers 'ECDHE-RSA-AES256-GCM-SHA512:DHE-RSA-AES256-GCM-SHA512:ECDHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-SHA384';

        ssl_prefer_server_ciphers on;



        access_log /var/log/nginx/access.log;

        error_log /var/log/nginx/error.log;



        gzip on;

        gzip_disable "msie6";



        upstream php-handler {

                server unix:/run/php/php7.0-fpm.sock;

        }



        server_tokens off;



        include /etc/nginx/conf.d/*.conf;

        include /etc/nginx/sites-enabled/*;

}

server {

  listen      80 default_server;

  listen     443 default_server;

  server_name _;

  return 444;

  access_log off; log_not_found off;

}

server {

  listen 80;

  listen [::]:80;

  server_name <mydomain.com>;

  return 301 https://$host$request_uri;

}

server {

  listen 443;

  server_name <mydomain.com>;



  ssl on;

  ssl_certificate /etc/acme.sh/<....>/fullchain.cer;

  ssl_certificate_key /etc/acme.sh/<....>/<...>.key;

  ssl_protocols TLSv1 TLSv1.1 TLSv1.2;

  ssl_ciphers HIGH:!aNULL:!MD5;



  location / {

      proxy_pass http://....:8080;

      proxy_set_header Host $http_host;

      proxy_set_header X-Real-IP $remote_addr;

      proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;

      proxy_set_header X-Forwarded-Proto $scheme;

      client_max_body_size 0;

  }

}

share|improve this question

asked 11 mins ago

MarcelMarcel

1

New contributor

Marcel is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.

share|improve this question

asked 11 mins ago

MarcelMarcel

1

New contributor

Marcel is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.

asked 11 mins ago

MarcelMarcel

1

New contributor

Marcel is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.

asked 11 mins ago

MarcelMarcel

1