HTTPS problems on Linux with nginx

22 kwietnia 2021 03:48:37
  • Wysłany: 4 kwietnia 2021 19:19
  • 4
I instantiated grandnode on a droplet from the Digital Ocean marketplace and then have attempted to to follow all the rest of the installation instructions. I am really close to getting things working, but not quite there. I am seeing several issues and some have been mentioned elsewhere here in the forum but no actual solutions. I suspect the grandnode installation instructions for nginx are not complete. I've got a web domain and set up a server block for nginx in the /etc/nginx/sites-available directory. I ran certbot and got certificates installed, plus the paths to them were added in the server block.

I can only get to the admin panel using the IP address, and not through the domain name.
I can get to the actual store page through the domain name and a lot of things show up, BUT;
   None of the images appear. On inspection the paths seem to be correct but I get a 404 on all of them.
   The favicon doesn't load in the store. But it does load in the admin panel.

In System Information I see;
Http request scheme http
Http scheme is https False

I realize this is bad but nothing I've done so far seems to fix it.

in /var/webapps/grandnode/App_Data/appsettings.json
"UseForwardedHeaders": true

In the nginx server block I had to add this or nothing was found on a page load;
root /var/webapps/grandnode;

I also had to add the server names.

In /var/log/nginx/error.log I see these errors but I don't think they are the problem?
2021/04/04 18:53:08 [warn] 2464#2464: conflicting server name "" on 0.0.0.0:80, ignored
2021/04/04 18:55:11 [warn] 2536#2536: could not build optimal proxy_headers_hash, you should increase either proxy_headers_hash_max_size: 512 or proxy_headers_hash_bucket_size: 64; ignoring proxy_headers_hash_bucket_size
0
  • Wysłany: 6 kwietnia 2021 07:29
  • Moderator
  • 856
Well, Digitalocean instruction doesn't contain the SSL configuration. After successful installation on server, you would need to change the Use Forwarded Headers in appsettings.json from false to true, then enable SSL in the Admin panel -> Configuration -> Stores. by Enabling proper checkbox and adding the secure URL.
Best regards,
Patryk

GrandNode Team
0
  • Wysłany: 6 kwietnia 2021 14:20
  • 4
Thanks for the suggestions, but I had searched the forum here for other posts about this problem and have already done those things.

SSl is enabled in the store panel and;
"UseForwardedHeaders": true,

I also read the documentation and have added the /etc/nginx/proxy.conf file. Oddly, when I run the nginx test I see an error on the file;

$ sudo nginx -t
nginx: [emerg] "client_max_body_size" directive is duplicate in /etc/nginx/conf.d/proxy.conf:6
nginx: configuration file /etc/nginx/nginx.conf test failed

Which is odd, because I am not seeing client_max_body_size anywhere else in the /etc/nginx directory. I have to comment out that line and all the subsequent lines, they also show as duplicates.

Any other suggestions? Obviously HTTPS is working to some extent and the certificate is valid, because I can get to the store itself using a https:// path. But none of the thumbnail images will load (though the files are present) and "Http scheme is https False" in the System Information panel. What is being looked at in the code to determine the Http scheme?

0
  • Wysłany: 8 kwietnia 2021 12:38
  • Moderator
  • 856
Well, if your store "System information" throws that Is https - false and https scheme - HTTP, it means that something is wrong with the SSL configuration on server, as I'm not a server administrator, I'm not able to help you, sorry. From my end, I can confirm that the simplest config for reverse proxy and SSL works fine.
Best regards,
Patryk

GrandNode Team
0
  • Wysłany: 8 kwietnia 2021 14:16
  • 4
'Something is wrong' is not very helpful. I've tried everything I can think of. Is there some technical person on the team that can offer suggestions to debug this? Instantiate a droplet and go through the process, there is more to it than what is described in the instructions.
0
  • Wysłany: 12 kwietnia 2021 06:22
  • Moderator
  • 17
William wrote:
Is there some technical person on the team that can offer suggestions to debug this?

You may always ask for support from our team. Please have a look at support service.
Best regards,
Tomasz

GrandNode Team
0
  • Wysłany: 12 kwietnia 2021 15:33
  • 4
With all due respect, I think I'll try one of the other open source store implementations and see if their installation works.
0
back to top
Filters