LINUX.ORG.RU
Ответ на: комментарий от Zhbert

Вводил все настройки, как на сайте (https://ultravds.com/blog/nastroika-virtualnogo-hosta-nginx-na-debian/) предварительно установив nginx все по пунктам, как нужно, и переходя по ссылке он долго-долго грузит, а потом выдает ошибку по времени ожидания

deathmoon
() автор топика
Ответ на: комментарий от Kolins

Generated by iptables-save v1.8.11 (nf_tables) on Tue Sep 9 10:39:16 2025 *filter :INPUT DROP [50:1792] :FORWARD DROP [0:0] :OUTPUT ACCEPT [0:0] :ufw-after-forward - [0:0] :ufw-after-input - [0:0] :ufw-after-logging-forward - [0:0] :ufw-after-logging-input - [0:0] :ufw-after-logging-output - [0:0] :ufw-after-output - [0:0] :ufw-before-forward - [0:0] :ufw-before-input - [0:0] :ufw-before-logging-forward - [0:0] :ufw-before-logging-input - [0:0] :ufw-before-logging-output - [0:0] :ufw-before-output - [0:0] :ufw-logging-allow - [0:0] :ufw-logging-deny - [0:0] :ufw-not-local - [0:0] :ufw-reject-forward - [0:0] :ufw-reject-input - [0:0] :ufw-reject-output - [0:0] :ufw-skip-to-policy-forward - [0:0] :ufw-skip-to-policy-input - [0:0] :ufw-skip-to-policy-output - [0:0] :ufw-track-forward - [0:0] :ufw-track-input - [0:0] :ufw-track-output - [0:0] :ufw-user-forward - [0:0] :ufw-user-input - [0:0] :ufw-user-limit - [0:0] :ufw-user-limit-accept - [0:0] :ufw-user-logging-forward - [0:0] :ufw-user-logging-input - [0:0] :ufw-user-logging-output - [0:0] :ufw-user-output - [0:0] -A INPUT -p tcp -m tcp –dport 443 -j ACCEPT -A INPUT -j ufw-before-logging-input -A INPUT -j ufw-before-input -A INPUT -j ufw-after-input -A INPUT -j ufw-after-logging-input -A INPUT -j ufw-reject-input -A INPUT -j ufw-track-input -A INPUT -p tcp -m tcp –dport 80 -j ACCEPT -A FORWARD -j ufw-before-logging-forward -A FORWARD -j ufw-before-forward -A FORWARD -j ufw-after-forward -A FORWARD -j ufw-after-logging-forward -A FORWARD -j ufw-reject-forward -A FORWARD -j ufw-track-forward -A OUTPUT -j ufw-before-logging-output -A OUTPUT -j ufw-before-output -A OUTPUT -j ufw-after-output -A OUTPUT -j ufw-after-logging-output -A OUTPUT -j ufw-reject-output -A OUTPUT -j ufw-track-output -A ufw-after-input -p udp -m udp –dport 137 -j ufw-skip-to-policy-input -A ufw-after-input -p udp -m udp –dport 138 -j ufw-skip-to-policy-input -A ufw-after-input -p tcp -m tcp –dport 139 -j ufw-skip-to-policy-input -A ufw-after-input -p tcp -m tcp –dport 445 -j ufw-skip-to-policy-input -A ufw-after-input -p udp -m udp –dport 67 -j ufw-skip-to-policy-input -A ufw-after-input -p udp -m udp –dport 68 -j ufw-skip-to-policy-input -A ufw-after-input -m addrtype –dst-type BROADCAST -j ufw-skip-to-policy-input -A ufw-after-logging-forward -m limit –limit 3/min –limit-burst 10 -j LOG –log-prefix "[UFW BLOCK] " -A ufw-after-logging-input -m limit –limit 3/min –limit-burst 10 -j LOG –log-prefix "[UFW BLOCK] " -A ufw-before-forward -m conntrack –ctstate RELATED,ESTABLISHED -j ACCEPT -A ufw-before-forward -p icmp -m icmp –icmp-type 3 -j ACCEPT -A ufw-before-forward -p icmp -m icmp –icmp-type 11 -j ACCEPT -A ufw-before-forward -p icmp -m icmp –icmp-type 12 -j ACCEPT -A ufw-before-forward -p icmp -m icmp –icmp-type 8 -j ACCEPT -A ufw-before-forward -j ufw-user-forward -A ufw-before-input -i lo -j ACCEPT -A ufw-before-input -m conntrack –ctstate RELATED,ESTABLISHED -j ACCEPT -A ufw-before-input -m conntrack –ctstate INVALID -j ufw-logging-deny -A ufw-before-input -m conntrack –ctstate INVALID -j DROP -A ufw-before-input -p icmp -m icmp –icmp-type 3 -j ACCEPT -A ufw-before-input -p icmp -m icmp –icmp-type 11 -j ACCEPT -A ufw-before-input -p icmp -m icmp –icmp-type 12 -j ACCEPT -A ufw-before-input -p icmp -m icmp –icmp-type 8 -j ACCEPT -A ufw-before-input -p udp -m udp –sport 67 –dport 68 -j ACCEPT -A ufw-before-input -j ufw-not-local -A ufw-before-input -d 224.0.0.251/32 -p udp -m udp –dport 5353 -j ACCEPT -A ufw-before-input -d 239.255.255.250/32 -p udp -m udp –dport 1900 -j ACCEPT -A ufw-before-input -j ufw-user-input -A ufw-before-output -o lo -j ACCEPT -A ufw-before-output -m conntrack –ctstate RELATED,ESTABLISHED -j ACCEPT -A ufw-before-output -j ufw-user-output -A ufw-logging-allow -m limit –limit 3/min –limit-burst 10 -j LOG –log-prefix "[UFW ALLOW] " -A ufw-logging-deny -m conntrack –ctstate INVALID -m limit –limit 3/min –limit-burst 10 -j RETURN -A ufw-logging-deny -m limit –limit 3/min –limit-burst 10 -j LOG –log-prefix "[UFW BLOCK] " -A ufw-not-local -m addrtype –dst-type LOCAL -j RETURN -A ufw-not-local -m addrtype –dst-type MULTICAST -j RETURN -A ufw-not-local -m addrtype –dst-type BROADCAST -j RETURN -A ufw-not-local -m limit –limit 3/min –limit-burst 10 -j ufw-logging-deny -A ufw-not-local -j DROP -A ufw-skip-to-policy-forward -j DROP -A ufw-skip-to-policy-input -j DROP -A ufw-skip-to-policy-output -j ACCEPT -A ufw-track-output -p tcp -m conntrack –ctstate NEW -j ACCEPT -A ufw-track-output -p udp -m conntrack –ctstate NEW -j ACCEPT -A ufw-user-input -p tcp -m tcp –dport 80 -m comment –comment «'dapp_Nginx%20HTTP'» -j ACCEPT -A ufw-user-input -p tcp -m tcp –dport 22 -j ACCEPT -A ufw-user-input -p udp -m multiport –dports 137,138 -m comment –comment «'dapp_Samba'» -j ACCEPT -A ufw-user-input -p tcp -m multiport –dports 139,445 -m comment –comment «'dapp_Samba'» -j ACCEPT -A ufw-user-input -p tcp -m tcp –dport 80 -j ACCEPT -A ufw-user-input -p tcp -m tcp –dport 443 -j ACCEPT -A ufw-user-input -p udp -m udp –dport 443 -j ACCEPT -A ufw-user-input -p tcp -m tcp –dport 80 -j ACCEPT -A ufw-user-input -p udp -m udp –dport 80 -j ACCEPT -A ufw-user-input -p tcp -m tcp –dport 443 -j ACCEPT -A ufw-user-limit -m limit –limit 3/min -j LOG –log-prefix "[UFW LIMIT BLOCK] " -A ufw-user-limit -j REJECT –reject-with icmp-port-unreachable -A ufw-user-limit-accept -j ACCEPT COMMIT

Completed on Tue Sep 9 10:39:16 2025

nginx: the configuration file /etc/nginx/nginx.conf syntax is ok nginx: configuration file /etc/nginx/nginx.conf test is successful

deathmoon
() автор топика
Ответ на: комментарий от deathmoon

nginx: the configuration file /etc/nginx/nginx.conf syntax is ok nginx: configuration file /etc/nginx/nginx.conf test is successful

-T (большая T)

ну и почитай внизу про разметку, такую простыню все проигнорируют

Kolins ★★★★★
()
Последнее исправление: Kolins (всего исправлений: 1)
Ответ на: комментарий от geometer

configuration file /etc/nginx/sites-enabled/default:

You should look at the following URL’s in order to grasp a solid understanding

of Nginx configuration files in order to fully unleash the power of Nginx.

https://www.nginx.com/resources/wiki/start/

https://www.nginx.com/resources/wiki/start/topics/tutorials/config_pitfalls/

https://wiki.debian.org/Nginx/DirectoryStructure

In most cases, administrators will remove this file from sites-enabled/ and

leave it as reference inside of sites-available where it will continue to be

updated by the nginx packaging team.

This file will automatically load configuration files provided by other

applications, such as Drupal or Wordpress. These applications will be made

available underneath a path with that package name, such as /drupal8.

Please see /usr/share/doc/nginx-doc/examples/ for more detailed examples.

Default server configuration

server { listen 80 default_server; listen [::]:80 default_server;

    # SSL configuration
    #
    # listen 443 ssl default_server;
    # listen [::]:443 ssl default_server;
    #
    # Note: You should disable gzip for SSL traffic.
    # See: https://bugs.debian.org/773332
    #
    # Read up on ssl_ciphers to ensure a secure configuration.
    # See: https://bugs.debian.org/765782
    #
    # Self signed certs generated by the ssl-cert package
    # Don't use them in a production server!
    #
    # include snippets/snakeoil.conf;

    root /var/www/html;

    # Add index.php to the list if you are using PHP
    index index.html index.htm index.nginx-debian.html;

    server_name maine.domain.ru;

    location / {
            # First attempt to serve request as file, then
            # as directory, then fall back to displaying a 404.
            try_files $uri $uri/ =404;
    }

    # pass PHP scripts to FastCGI server
    #
    #location ~ \.php$ {
    #       include snippets/fastcgi-php.conf;
    #
    #       # With php-fpm (or other unix sockets):
    #       fastcgi_pass unix:/run/php/php7.4-fpm.sock;
    #       # With php-cgi (or other tcp sockets):
    #       fastcgi_pass 127.0.0.1:9000;
    #}

    # deny access to .htaccess files, if Apache's document root
    # concurs with nginx's one
    #
    #location ~ /\.ht {
    #       deny all;
    #}

}

Virtual Host configuration for example.com

You can move that to a different file under sites-available/ and symlink that

to sites-enabled/ to enable it.

#server {

listen 80;

listen [::]:80;

server_name example.com;

root /var/www/example.com;

index index.html;

location / {

try_files $uri $uri/ =404;

}

#}

configuration file /etc/nginx/sites-enabled/vash.domain.ru:

server { listen 80; listen [::]:80; root /var/www/vash.domain.ru/html; index index.html index.htm index.nginx-debian.html; server_name vash.domain.ru www.vash.domain.ru; location / { try_files $uri $uri/ =404; } }

deathmoon
() автор топика
Ответ на: комментарий от Kolins

server { listen 80 default_server; listen [::]:80 default_server;

# SSL configuration
#
# listen 443 ssl default_server;
# listen [::]:443 ssl default_server;
#
# Note: You should disable gzip for SSL traffic.
# See: https://bugs.debian.org/773332
#
# Read up on ssl_ciphers to ensure a secure configuration.
# See: https://bugs.debian.org/765782
#
# Self signed certs generated by the ssl-cert package
# Don't use them in a production server!
#
# include snippets/snakeoil.conf;

root /var/www/html;

# Add index.php to the list if you are using PHP
index index.html index.htm index.nginx-debian.html;

server_name maine.domain.ru;

location / {
        # First attempt to serve request as file, then
        # as directory, then fall back to displaying a 404.
        try_files $uri $uri/ =404;
}

# pass PHP scripts to FastCGI server
#
#location ~ \.php$ {
#       include snippets/fastcgi-php.conf;
#
#       # With php-fpm (or other unix sockets):
#       fastcgi_pass unix:/run/php/php7.4-fpm.sock;
#       # With php-cgi (or other tcp sockets):
#       fastcgi_pass 127.0.0.1:9000;
#}

# deny access to .htaccess files, if Apache's document root
# concurs with nginx's one
#
#location ~ /\.ht {
#       deny all;
#}

} #server #{ #listen 80; #listen [::]:80; #root /var/www/vash.domain.ru/html; #index index.html index.htm index.nginx-debian.html; #server_name vash.domain.ru www.vash.domain.ru; #location / # { # try_files $uri $uri/ =404; #} #} вот что не так тут

deathmoon
() автор топика
Ответ на: комментарий от deathmoon

Тогда получается, что ты его самочинно хочешь использовать. Смотри, чтобы к тебе на сайт можно было зайти, ты должен получить домен, некую строку, по которой можно будет идентифицировать компьютер, на котором у тебя работает сервер. Пока ты не получил домен, вместо адреса твоего сайта можно будет использовать только голый IP.

geometer
()