为 nginx 设置 laravel（权限被拒绝的错误）

Question

我尝试为 nginx 设置我的 laravel。我的配置：

server {
    listen 80;
    server_name decoder.lan;
    root /var/www/decoder-now/public;

    index index.php;

    try_files $uri $uri/ @rewrite;

    location @rewrite {
        rewrite ^/(.*)$ /index.php?_url=/$1;
    }

    location @php { ## Depending on your Nginx version, you might need to change this to location ~ \.php$ {
        fastcgi_pass 127.0.0.1:9000;
        fastcgi_index index.php;

        fastcgi_split_path_info ^(.+\.php)(/.+)$;
        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
        include fastcgi_params;
    }

    location @handler {
      rewrite / /index.php;
    }

}

我在 error.log 中收到错误：

  2014/11/24 15:13:43 [crit] 14063#0: *10 stat() "/var/www/decoder-now/public/index.php" failed (13: Permission denied), client: 127.0.0.1, server: decoder.lan, request: "GET /address/ HTTP/1.1", host: "decoder.lan"
    2014/11/24 15:13:43 [crit] 14063#0: *10 stat() "/var/www/decoder-now/public/index.php" failed (13: Permission denied), client: 127.0.0.1, server: decoder.lan, request: "GET /address/ HTTP/1.1", host: "decoder.lan"
    2014/11/24 15:13:43 [crit] 14063#0: *10 stat() "/var/www/decoder-now/public/index.php" failed (13: Permission denied), client: 127.0.0.1, server: decoder.lan, request: "GET /address/ HTTP/1.1", host: "decoder.lan"
    2014/11/24 15:13:43 [crit] 14063#0: *10 stat() "/var/www/decoder-now/public/index.php" failed (13: Permission denied), client: 127.0.0.1, server: decoder.lan, request: "GET /address/ HTTP/1.1", host: "decoder.lan"
    2014/11/24 15:13:43 [crit] 14063#0: *10 stat() "/var/www/decoder-now/public/index.php" failed (13: Permission denied), client: 127.0.0.1, server: decoder.lan, request: "GET /address/ HTTP/1.1", host: "decoder.lan"
    2014/11/24 15:13:43 [crit] 14063#0: *10 stat() "/var/www/decoder-now/public/index.php" failed (13: Permission denied), client: 127.0.0.1, server: decoder.lan, request: "GET /address/ HTTP/1.1", host: "decoder.lan"
    2014/11/24 15:13:43 [crit] 14063#0: *10 stat() "/var/www/decoder-now/public/index.php" failed (13: Permission denied), client: 127.0.0.1, server: decoder.lan, request: "GET /address/ HTTP/1.1", host: "decoder.lan"
    2014/11/24 15:13:43 [crit] 14063#0: *10 stat() "/var/www/decoder-now/public/index.php" failed (13: Permission denied), client: 127.0.0.1, server: decoder.lan, request: "GET /address/ HTTP/1.1", host: "decoder.lan"
    2014/11/24 15:13:43 [crit] 14063#0: *10 stat() "/var/www/decoder-now/public/index.php" failed (13: Permission denied), client: 127.0.0.1, server: decoder.lan, request: "GET /address/ HTTP/1.1", host: "decoder.lan"
    2014/11/24 15:13:43 [crit] 14063#0: *10 stat() "/var/www/decoder-now/public/index.php" failed (13: Permission denied), client: 127.0.0.1, server: decoder.lan, request: "GET /address/ HTTP/1.1", host: "decoder.lan"
    2014/11/24 15:13:43 [error] 14063#0: *10 rewrite or internal redirection cycle while redirect to named location "@rewrite", client: 127.0.0.1, server: decoder.lan, request: "GET /address/ HTTP/1.1", host: "decoder.lan"

此示例适用于 url：decoder.lan/address，但 decoder.lan/ 也不适用。

access.log 文件：

127.0.0.1 - - [24/Nov/2014:15:13:43 +0300] "GET /address/ HTTP/1.1" 500 603 "-" "Mozilla/5.0 (X11; Linux i686 (x86_64)) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.65 Safari/537.36"

我试过检查工作是否听这个文件。我从控制台通过命令检查：

sudo -u www-data cat index.php

从控制台文件被打开。

我使用 www-data 用户，因为在 /ect/php5/fpm/pool.d/www.conf 我有：

listen.owner = www-data
listen.group = www-data
listen.mode = 0660

.../decoder-now/public/ 文件夹中的文件列表：

-rwxr-xr-x 1 www-data  www-data 2238 нояб. 17 19:01 favicon.ico
-rwxrwxrwx 1 www-data  www-data 1586 нояб. 17 19:01 index.php
drwxr-xr-x 2 www-data  www-data 4096 нояб. 17 19:01 packages
-rwxr-xr-x 1 www-data  www-data   24 нояб. 17 19:01 robots.txt

在这种情况下，我使用了 apache 服务器，但此时他已断电。所有请求都在 nginx 服务器上进行。

请帮帮我，对不起我的英语不好:)

Answer 1

这是我用于 Laravel 站点的 Nginx 设置。

server {
    listen 80;
    listen [::]:80 ipv6only=on;

    server_name SITE_URL;

    access_log      /var/log/nginx/access.log;
    error_log       /var/log/nginx/error.log;
    rewrite_log     on;
    access_log      on;

    root WEB_ROOT;

    index index.php;

    location / {
        try_files $uri $uri/ /index.php?$query_string;
    }

    # Remove trailing slash.
    if (!-d $request_filename) {
        rewrite     ^/(.+)/$ /$1 permanent;
    }

    location ~* \.php$ {
        fastcgi_pass                unix:/var/run/php5-fpm.sock;
        fastcgi_index               index.php;
        fastcgi_split_path_info     ^(.+\.php)(.*)$;
        include                     /etc/nginx/fastcgi_params;
        fastcgi_param               SCRIPT_FILENAME $document_root$fastcgi_script_name;
    }

    # We don't need .ht files with Nginx.
     location ~ /\.ht {
         deny all;
     }
}

Answer 2

首先，您似乎有权限问题，请检查正在运行的用户 nginx 工作进程（用户指令）。

第二件事，永远无法到达您的@php 和@handler 位置。

第三件事，你的try_files 指令负责产生一个内部重定向循环。只需举一个示例 URL，花点时间思考一下 nginx 会做什么：

1. 你打了http://decoder.lan/address/
2. try files 指令在运行时等同于try_files /address/ /address// @rewrite;
3. @rewrite 命名位置将导致重写 URI：/index.php?_url=/address/
4. 如果没有为 rewrite 指令指定标志，默认行为是使用 last 标志，这意味着它会在内部重定向到 /index.php?_url=/address/ 并一次又一次地进入 the try_files。

因此，您实际上可能需要使用try_files $uri $uri/ /index.php?_url=$request_uri;并将location @php更改为location ~\.php$，而不是使用try_files $uri $uri/ @rewrite;