Nginx - Revision history

Tony: /* HOWTO */

2026-06-04T08:30:08Z

HOWTO

← Older revision		Revision as of 08:30, 4 June 2026
Line 70:		Line 70:
	ssl_prefer_server_ciphers on;		ssl_prefer_server_ciphers on;

			==Set server directives globally==
			Put them in '''/etc/nginx/conf.d/directives.conf'''

	===CSP===		===CSP===

2026-05-11T07:43:15Z

Logging

← Older revision		Revision as of 07:43, 11 May 2026
Line 114:		Line 114:
	and then in your vhost configuration:		and then in your vhost configuration:
	access_log /var/log/nginx/myhost.access.log combined if=$loggable;		access_log /var/log/nginx/myhost.access.log combined if=$loggable;


			===Regular expression on $request===
			To filter out the nextcloud preview 404s:
			map $request $loggable {
			"~^GET \/index\.php\/core\/preview.*$" 0;
			default 1;
			}

	==Get configuration items==		==Get configuration items==

2026-05-08T08:06:55Z

FAQ

← Older revision		Revision as of 08:06, 8 May 2026
Line 163:		Line 163:

	=FAQ=		=FAQ=
			==php not executed but downloaded==
			In case of php-fpm see:
			*https://oneuptime.com/blog/post/2025-12-16-nginx-php-download-instead-of-execute/view

	==Security settings==		==Security settings==
	===X-Content-Type-Options===		===X-Content-Type-Options===

2026-05-05T10:45:57Z

Error messages

← Older revision		Revision as of 10:45, 5 May 2026
Line 264:		Line 264:
	systemctl restart nginx		systemctl restart nginx

			===upstream sent no valid HTTP/1.0 ===
			Check for confusion between http and https

	[[Category: Proxy]]		[[Category: Proxy]]
	[[Category: Web Services]]		[[Category: Web Services]]

2026-05-01T09:45:48Z

@@ Line 99: / Line 99: @@
 Add the .p12 in Advanced->Manage certificates->Your certificates
 ==Get configuration items==
@@ Line 250: / Line 264: @@
   systemctl restart nginx
 [[Category: Proxy]]
 [[Category: Web Services]]

2026-02-18T16:25:21Z

HOWTO

← Older revision		Revision as of 16:25, 18 February 2026
Line 142:		Line 142:
	==Exclude not found from log==		==Exclude not found from log==
	log_not_found off;		log_not_found off;


			==Allow zabbix to read nginx error log==
			setfacl -m g:zabbix:r /var/log/nginx/error.log
			(perhaps put this in logrotate postrotate)

	=FAQ=		=FAQ=

2026-02-04T10:35:33Z

FAQ

← Older revision		Revision as of 10:35, 4 February 2026
Line 239:		Line 239:
	===nginx: [emerg] a duplicate default server for 0.0.0.0:80===		===nginx: [emerg] a duplicate default server for 0.0.0.0:80===
	Multiple vhosts having "default_server" in their '''listen''' lines		Multiple vhosts having "default_server" in their '''listen''' lines


			===nginx: [error] invalid PID number "" in "/run/nginx.pid"===
			Try
			systemctl restart nginx

	==Logging==		==Logging==

2026-02-04T10:31:56Z

Error messages

← Older revision		Revision as of 10:31, 4 February 2026
Line 236:		Line 236:
	===[emerg] duplicate listen options for [::]:443 ===		===[emerg] duplicate listen options for [::]:443 ===
	looks like "ipv6only=on" added by letsencrypt causes that, removing it might help		looks like "ipv6only=on" added by letsencrypt causes that, removing it might help

			===nginx: [emerg] a duplicate default server for 0.0.0.0:80===
			Multiple vhosts having "default_server" in their '''listen''' lines

	==Logging==		==Logging==

2026-01-04T19:51:00Z

ERR_HTTP2_PROTOCOL_ERROR

← Older revision		Revision as of 19:51, 4 January 2026
Line 169:		Line 169:
	==Error messages==		==Error messages==
	===ERR_HTTP2_PROTOCOL_ERROR===		===ERR_HTTP2_PROTOCOL_ERROR===
	~~Could~~ be ~~"content filter"~~ on ~~your gateway~~		Check with curl:
			curl --http2 https://example.com
			I got
			curl: (92) : frame type: 1, stream: 1, Invalid HTTP header field was receivedname: [content-security-policy]

			found out the hard way that add_header arguments have to be on single line

	===nginx: [emerg] unknown log format===		===nginx: [emerg] unknown log format===

2025-12-30T14:16:19Z

Error messages

← Older revision		Revision as of 14:16, 30 December 2025
Line 168:		Line 168:

	==Error messages==		==Error messages==
			===ERR_HTTP2_PROTOCOL_ERROR===
			Could be "content filter" on your gateway

	===nginx: [emerg] unknown log format===		===nginx: [emerg] unknown log format===
Line 229:		Line 231:
	===[emerg] duplicate listen options for [::]:443 ===		===[emerg] duplicate listen options for [::]:443 ===
	looks like "ipv6only=on" added by letsencrypt causes that, removing it might help		looks like "ipv6only=on" added by letsencrypt causes that, removing it might help


	==Logging==		==Logging==