ML
    • Recent
    • Categories
    • Tags
    • Popular
    • Users
    • Groups
    • Register
    • Login

    Setting up Nginx on CentOS 7 as a reverse proxy

    IT Discussion
    centos 7 nginx reverse proxy setup how to
    13
    57
    23.8k
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • wirestyle22W
      wirestyle22 @JaredBusch
      last edited by

      @jaredbusch Understood. Thanks. I bet multiple configs makes it easier organizationally and also when troubleshooting so you have less to go through.

      JaredBuschJ 1 Reply Last reply Reply Quote 0
      • JaredBuschJ
        JaredBusch @wirestyle22
        last edited by

        @wirestyle22 said in Setting up Nginx on CentOS 7 as a reverse proxy:

        @jaredbusch Understood. Thanks. I bet multiple configs makes it easier organizationally and also when troubleshooting so you have less to go through.

        That is my preference, yes.

        1 Reply Last reply Reply Quote 1
        • JaredBuschJ
          JaredBusch @Dashrender
          last edited by

          @dashrender said in Setting up Nginx on CentOS 7 as a reverse proxy:

          @jaredbusch said in Setting up Nginx on CentOS 7 as a reverse proxy:

          I prefer to have each server block for each domain/subdomain in it's own config file.

          0_1514323567627_24a83769-9483-4b32-af2c-3a190ad8f60d-image.png

          wow, you are hosting a lot there.

          Not really. Just everything is broken out.

          1 Reply Last reply Reply Quote 1
          • wirestyle22W
            wirestyle22
            last edited by wirestyle22

            So I ran into this
            0_1514509710111_1.PNG

            but the nginx documentation here points to this: https://nginx.org/en/docs/http/server_names.html
            0_1514509728545_2.PNG

            Is there an error here I'm not seeing? I mean, there must be. Each time I make a change I systemctl reload nginx

            1 Reply Last reply Reply Quote 0
            • wirestyle22W
              wirestyle22
              last edited by

              This post is deleted!
              1 Reply Last reply Reply Quote 0
              • wirestyle22W
                wirestyle22
                last edited by

                This post is deleted!
                1 Reply Last reply Reply Quote 0
                • wirestyle22W
                  wirestyle22
                  last edited by

                  Actually I think I figured it out. made a mistake with the .conf files

                  zachary715Z 1 Reply Last reply Reply Quote 0
                  • zachary715Z
                    zachary715 @wirestyle22
                    last edited by

                    @wirestyle22 Share your resolution if you will. I was trying to install nginx on a server with wiki.js the other day and was running into the same error.

                    wirestyle22W 1 Reply Last reply Reply Quote 0
                    • JaredBuschJ
                      JaredBusch
                      last edited by JaredBusch

                      I never run certbot with one of the specific switches like --nginx or --apache. Ever.

                      Fuck letting some 3rd party script edit my configuration files.

                      I run in standalone mode and edit the conf files myself.

                      I also include multiple SAN on my certs, so the same SSL file is in multiple conf files.

                      black3dynamiteB DashrenderD wirestyle22W 3 Replies Last reply Reply Quote 1
                      • black3dynamiteB
                        black3dynamite @JaredBusch
                        last edited by

                        @jaredbusch said in Setting up Nginx on CentOS 7 as a reverse proxy:

                        I never run certbot with one of the specific switches like --nginx or --apache. Ever.

                        Fuck letting some 3rd party script edit my configuration files.

                        I run in standalone mode and edit the conf files myself.

                        I also include multiple SAN on my certs, so the same SSL file is in multiple conf files.

                        But doesn’t ‘certonly’ keeps it from editing the files?

                        1 Reply Last reply Reply Quote 0
                        • DashrenderD
                          Dashrender @JaredBusch
                          last edited by

                          @jaredbusch said in Setting up Nginx on CentOS 7 as a reverse proxy:

                          I never run certbot with one of the specific switches like --nginx or --apache. Ever.

                          Fuck letting some 3rd party script edit my configuration files.

                          I run in standalone mode and edit the conf files myself.

                          I also include multiple SAN on my certs, so the same SSL file is in multiple conf files.

                          LOL - JB doesn't trust scripts from LE or whomever made them, but he for some reason trusts other people's scripts.... LOL

                          black3dynamiteB JaredBuschJ 2 Replies Last reply Reply Quote 0
                          • black3dynamiteB
                            black3dynamite @Dashrender
                            last edited by

                            @dashrender said in Setting up Nginx on CentOS 7 as a reverse proxy:

                            @jaredbusch said in Setting up Nginx on CentOS 7 as a reverse proxy:

                            I never run certbot with one of the specific switches like --nginx or --apache. Ever.

                            Fuck letting some 3rd party script edit my configuration files.

                            I run in standalone mode and edit the conf files myself.

                            I also include multiple SAN on my certs, so the same SSL file is in multiple conf files.

                            LOL - JB doesn't trust scripts from LE or whomever made them, but he for some reason trusts other people's scripts.... LOL

                            I thought he said something about magic scripts that he doesn’t like?

                            DashrenderD 1 Reply Last reply Reply Quote 0
                            • JaredBuschJ
                              JaredBusch @Dashrender
                              last edited by JaredBusch

                              @dashrender said in Setting up Nginx on CentOS 7 as a reverse proxy:

                              @jaredbusch said in Setting up Nginx on CentOS 7 as a reverse proxy:

                              I never run certbot with one of the specific switches like --nginx or --apache. Ever.

                              Fuck letting some 3rd party script edit my configuration files.

                              I run in standalone mode and edit the conf files myself.

                              I also include multiple SAN on my certs, so the same SSL file is in multiple conf files.

                              LOL - JB doesn't trust scripts from LE or whomever made them, but he for some reason trusts other people's scripts.... LOL

                              Scripts that install software is different than scripts that change your configuration files.

                              I run the certbot scripts, no problem. Just not in a way that lets them fuck up my configuration.

                              1 Reply Last reply Reply Quote 0
                              • DashrenderD
                                Dashrender @black3dynamite
                                last edited by

                                @black3dynamite said in Setting up Nginx on CentOS 7 as a reverse proxy:

                                @dashrender said in Setting up Nginx on CentOS 7 as a reverse proxy:

                                @jaredbusch said in Setting up Nginx on CentOS 7 as a reverse proxy:

                                I never run certbot with one of the specific switches like --nginx or --apache. Ever.

                                Fuck letting some 3rd party script edit my configuration files.

                                I run in standalone mode and edit the conf files myself.

                                I also include multiple SAN on my certs, so the same SSL file is in multiple conf files.

                                LOL - JB doesn't trust scripts from LE or whomever made them, but he for some reason trusts other people's scripts.... LOL

                                I thought he said something about magic scripts that he doesn’t like?

                                What makes them magic?

                                1 Reply Last reply Reply Quote 0
                                • wirestyle22W
                                  wirestyle22 @zachary715
                                  last edited by wirestyle22

                                  @zachary715 said in Setting up Nginx on CentOS 7 as a reverse proxy:

                                  @wirestyle22 Share your resolution if you will. I was trying to install nginx on a server with wiki.js the other day and was running into the same error.

                                  That occurs if you don't create actual entries for the server in the config files. I definitely agree with @JaredBusch now that I have gone through the configs and mostly know whats going on. As far as I can see it there are two ways to config.

                                  One is editing /etc/nginx/nginx.conf. This is one huge config and you have to add your server entries all into it, which is what it is referring to when it tells you to add a server_name directive to your nginx configuration. Example of a server entry that you would put into the nginx.conf from JB's gude:

                                  server {
                                  	client_max_body_size 40M;
                                  	listen 443 ssl;
                                  	server_name www.domain.com domain.com;	#change to your domain name
                                  	ssl          on;
                                  	ssl_certificate /etc/ssl/cacert.pem;	#this needs to be the path to your certificate information
                                  	ssl_certificate_key /etc/ssl/privkey.pem;	#this needs to be the path to your certificate information
                                  
                                  	location / {
                                  		proxy_set_header X-Real-IP $remote_addr;
                                  		proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
                                  		proxy_set_header Host $http_host;
                                  		proxy_set_header X-NginX-Proxy true;
                                  		proxy_pass https://10.0.0.2:443;	#change to your internal server IP
                                  		proxy_redirect off;
                                  	}
                                  }
                                  

                                  Inside of this config you will see a line that tells you any .conf file contained within /etc/nginx/conf.d/ will be used en lieu of the main nginx config. Those config files are identical to what I list above. As JB said you would name them your subdomain/domain name. subdomain.domain.conf <---not .com

                                  It's definitely better to do it the way JB did with separate config files just from an organizational standpoint as he said above.

                                  Check your files and make sure this is the case.

                                  Thanks to @scottalanmiller for taking time with me to explain some nginx stuff last night. Definitely helped me a lot conceptually

                                  A 1 Reply Last reply Reply Quote 0
                                  • wirestyle22W
                                    wirestyle22 @JaredBusch
                                    last edited by wirestyle22

                                    @jaredbusch said in Setting up Nginx on CentOS 7 as a reverse proxy:

                                    I run in standalone mode and edit the conf files myself

                                    I'm interested if you're willing to write something up on that. I think I mostly understand this, but clarification would be great.

                                    1 Reply Last reply Reply Quote 0
                                    • brandon220B
                                      brandon220
                                      last edited by

                                      Just an FYI - to get semanage to work on Fedora 27, I had to install policycoreutils-python-utils

                                      JaredBuschJ 1 Reply Last reply Reply Quote 0
                                      • JaredBuschJ
                                        JaredBusch @brandon220
                                        last edited by

                                        @brandon220 said in Setting up Nginx on CentOS 7 as a reverse proxy:

                                        Just an FYI - to get semanage to work on Fedora 27, I had to install policycoreutils-python-utils

                                        Yeah, I really need to write a new guide.

                                        1 Reply Last reply Reply Quote 0
                                        • A
                                          Alex Sage @wirestyle22
                                          last edited by Alex Sage

                                          @wirestyle22 said in Setting up Nginx on CentOS 7 as a reverse proxy:

                                          As JB said you would name them your subdomain/domain name. subdomain.domain.conf <---not .com

                                          I name mine subdomain.domain.tld.conf

                                          JaredBuschJ 1 Reply Last reply Reply Quote 0
                                          • JaredBuschJ
                                            JaredBusch @Alex Sage
                                            last edited by

                                            @aaronstuder said in Setting up Nginx on CentOS 7 as a reverse proxy:

                                            @wirestyle22 said in Setting up Nginx on CentOS 7 as a reverse proxy:

                                            As JB said you would name them your subdomain/domain name. subdomain.domain.conf <---not .com

                                            I name mine subdomain.domain.tld.conf

                                            Yeah, mine are the full thing with a .conf at the end.

                                            daerma.com.conf
                                            obelisk.daerma.com.conf
                                            
                                            wirestyle22W 1 Reply Last reply Reply Quote 0
                                            • 1
                                            • 2
                                            • 3
                                            • 2 / 3
                                            • First post
                                              Last post