nginx - 配置问题 - 生产模式 - 代码 403

Question

我想用 Rails 4 配置 NGINX 并在生产模式下运行我的应用程序。问题是我得到 403 代码 - 命令：rails s -e production 并在浏览器中输入 localhost。自然地，我为我的应用程序文件夹中的整个文件建立了755 权限。下面是我的 nginx.conf：

worker_processes  1;

events {
    worker_connections  1024;
}

http {
    include               mime.types;
    # include /etc/nginx/conf.d/*.conf;
    # include /etc/nginx/sites-enabled/*;
    default_type          application/octet-stream;

    sendfile              on;

    keepalive_timeout     65;
    client_max_body_size  50M;

    # fastcgi_buffers 8 16k;
    # fastcgi_buffer_size 32k;
    # fastcgi_connect_timeout 300;
    # fastcgi_send_timeout 300;
    # fastcgi_read_timeout 300;

    upstream proxy-user {
        server 127.0.0.1:2000;
    }

    upstream thin_cluster {
        server unix:/tmp/thin.0.sock;
       # server unix:/tmp/thin.1.sock;
       # server unix:/tmp/thin.2.sock;
    }

    server {
        listen 80;
        server_name localhost;
        # access_log  /var/log/nginx-access.log;
        root        /home/user/Apps/myapp/public;

        location ~* ^.+\.(jpg|jpeg|gif|png|ico|css|zip|tgz|gz|rar|bz2|doc|xls|exe|pdf|ppt|txt|tar|mid|midi|wav|bmp|rtf|js|mp3|flv|mpeg|avi)$ {
        try_files $uri @app;
        }

        location /home/user/Apps/myapp/ {
            proxy_set_header  X-Real-IP        $remote_addr;
            proxy_set_header  X-Forwarded-For  $proxy_add_x_forwarded_for;
            proxy_set_header  Host             $http_host;
            proxy_redirect    off;
            proxy_pass        http://proxy-user;

            if (!-f $request_filename) {
              proxy_pass http://proxy-user;
              break;
            }
        }
    }

    server {
        listen                443;
        server_name           _;
        ssl                   on;
        ssl_certificate       /etc/nginx/ssl/server.crt;
        ssl_certificate_key   /etc/nginx/ssl/server.key;
        ssl_protocols         SSLv3 TLSv1;
        ssl_ciphers           HIGH:!ADH:!MD5;
        access_log            /var/log/nginx-access-ssl.log;
        root                  /home/user/Apps/myapp/public;

        location ~* ^.+\.(jpg|jpeg|gif|png|ico|css|zip|tgz|gz|rar|bz2|doc|xls|exe|pdf|ppt|txt|tar|mid|midi|wav|bmp|rtf|js|mp3|flv|mpeg|avi)$ {
        try_files $uri @app;
        }

        location /home/user/Apps/myapp/ {
            proxy_set_header  X-Real-IP             $remote_addr;
            proxy_set_header  X-Forwarded-For       $proxy_add_x_forwarded_for;
            proxy_set_header  X-FORWARDED_PROTO     https;
            proxy_set_header  SSL_CLIENT_S_DN       $ssl_client_s_dn;
            proxy_set_header  Host                  $http_host;
            proxy_redirect    off;
            proxy_pass        http://proxy-user;
        }

        error_page   500 502 503 504  /50x.html;

        location = /50x.html {
        }
    }
}

Answer 1

你的配置有点问题，我会写下我会做什么，你告诉我你有什么问题，我假设服务器在端口 2000 上，因为那是你使用的上游。

我也会忽略 http 块，只使用 server 和 upstream 块。

upstream rails {
    server 127.0.0.1:2000;
}
server {
  server_name domain.com; # or whichever
  listen 80;

  # ssl settings start
  listen 443 ssl;
  ssl_certificate /etc/nginx/ssl/server.crt;
  ssl_certificate_key /etc/nginx/ssl/server.key;
  # ssl settings end

  root /home/user/Apps/myapp/public;
  error_page 500 502 503 504  /50x.html;
  access_log /var/log/nginx/domain-access.log;
  error_log /var/log/nginx/domain-error.log;

  location @pass_to_rails {
    proxy_set_header  X-Real-IP             $remote_addr;
    proxy_set_header  X-Forwarded-For       $proxy_add_x_forwarded_for;
    proxy_set_header  X-FORWARDED_PROTO     $scheme;
    proxy_set_header  Host                  $http_host;
    proxy_redirect    off;
    proxy_pass        http://rails;
  }

  location / {
    try_files $uri $uri/ @pass_to_rails;
  }
}

如果您使用的是 debian/ubuntu 发行版，您应该将其放在 sites-available 中并符号链接到 sites-enabled，或者如果您使用其他发行版，则使用 /etc/nginx/conf.d，以保持整洁和可维护。

还要确保根据您要使用的内容取消注释其中一行

# include /etc/nginx/conf.d/*.conf;
# include /etc/nginx/sites-enabled/*;