Tschüss!Ihr habt keine Interesse Anfängern zu helfen, ihr habt nur Interesse draufzuhauen. Bis raus.
HTTP/2 502Bitte mal in den Nginx-Error-Logs der Domain nachsehen, die nicht verbindet. Oder passiert das bei allen deinen Domains?
/edit: Nur von externen IPs nicht aufrufbar oder auch lokal vom Ser4ver per curl?
curl -o - -I https://deine-domain.de/
[error] 2165#0: *7750 connect() failed (111: Connection refused) while connecting to upstream, client: bbbb:bb:bbbb:bbbb:bbbb:bbbb:bbbb:bbbb, server: gxxxxxxx-xxxxxs.de, request: "GET / HTTP/2.0", upstream: "https://[xxxx:xxxx:xxx:xxxx::2]:7081/", host: "gxxxxxxx-xxxxxs.de"
[error] 2165#0: *7779 connect() failed (111: Connection refused) while connecting to upstream, client: bbbb:bb:bbbb:bbbb:bbbb:bbbb:bbbb:bbbb, server: gxxxxxxx-xxxxxs.de, request: "GET / HTTP/2.0", upstream: "https://[xxxx:xxxx:xxx:xxxx::2]:7081/", host: "gxxxxxxx-xxxxxs.de"
Ich kann dir versichern, daß hier niemand "draufhauen" will.Ihr habt keine Interesse Anfängern zu helfen, ihr habt nur Interesse draufzuhauen.
root@xxxx /etc/nginx/plesk.conf.d/vhosts # cat /var/www/vhosts/system/gxxxxxxx-xxxxxs.de/conf/nginx.conf
#ATTENTION!
#
#DO NOT MODIFY THIS FILE BECAUSE IT WAS GENERATED AUTOMATICALLY,
#SO ALL YOUR CHANGES WILL BE LOST THE NEXT TIME THE FILE IS GENERATED.
proxy_cache_path /var/cache/nginx/gxxxxxxx-xxxxxs.de_proxy levels=1:2 keys_zone=gxxxxxxx-xxxxxs.de_proxy:5m max_size=67108864;
server {
listen xx.xx.xxx.xxx:443 ssl http2;
server_name gxxxxxxx-xxxxxs.de;
server_name www.gxxxxxxx-xxxxxs.de;
server_name ipv4.gxxxxxxx-xxxxxs.de;
ssl_certificate /opt/psa/var/certificates/scfPLxmZd;
ssl_certificate_key /opt/psa/var/certificates/scfPLxmZd;
client_max_body_size 128m;
root "/var/www/vhosts/gxxxxxxx-xxxxxs.de/httpdocs";
access_log "/var/www/vhosts/system/gxxxxxxx-xxxxxs.de/logs/proxy_access_ssl_log";
error_log "/var/www/vhosts/system/gxxxxxxx-xxxxxs.de/logs/proxy_error_log";
add_header X-Cache-Status $upstream_cache_status;
set $no_cache "";
set $cache_cookie $http_cookie;
if ($cache_cookie !~ "^\s*$") {
set $no_cache 1;
}
#extension letsencrypt begin
location ^~ /.well-known/acme-challenge/ {
root /var/www/vhosts/default/htdocs;
types { }
default_type text/plain;
satisfy any;
auth_basic off;
allow all;
location ~ ^/\.well-known/acme-challenge.*/\. {
deny all;
}
}
#extension letsencrypt end
#extension sslit begin
add_header Strict-Transport-Security "max-age=15768000; includeSubDomains" always;
#OCSP Stapling
ssl_stapling on;
ssl_stapling_verify on;
#extension sslit end
#extension sectigo begin
location ^~ /.well-known/pki-validation/fileauth.txt {
try_files $uri $uri/ =404;
}
location ^~ /.well-known/pki-validation/ {
root /var/www/vhosts/default/htdocs;
types { }
default_type text/plain;
satisfy any;
auth_basic off;
allow all;
location ~ ^/\.well-known/pki-validation.*/\. {
deny all;
}
}
#extension sectigo end
location / {
proxy_pass https://xx.xx.xxx.xxx:7081;
proxy_hide_header upgrade;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
access_log off;
proxy_cache_key "$scheme$request_method$host$request_uri";
proxy_no_cache $no_cache $http_pragma $http_authorization $arg_nocache;
proxy_cache_bypass $no_cache $http_pragma $http_authorization $arg_nocache;
proxy_cache gxxxxxxx-xxxxxs.de_proxy;
proxy_cache_valid "5";
proxy_cache_use_stale http_500 http_502 http_503 http_504 updating;
proxy_cache_background_update on;
}
location ~ ^/(plesk-stat|awstats-icon|webstat|webstat-ssl|ftpstat|anon_ftpstat) {
proxy_pass https://xx.xx.xxx.xxx:7081;
proxy_hide_header upgrade;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
access_log off;
}
add_header X-Powered-By PleskLin;
include "/var/www/vhosts/system/gxxxxxxx-xxxxxs.de/conf/vhost_nginx.conf";
}
server {
listen [xxxx:xxxx:xxx:xxxx::2]:443 ssl http2;
server_name gxxxxxxx-xxxxxs.de;
server_name www.gxxxxxxx-xxxxxs.de;
server_name ipv6.gxxxxxxx-xxxxxs.de;
ssl_certificate /opt/psa/var/certificates/scfPLxmZd;
ssl_certificate_key /opt/psa/var/certificates/scfPLxmZd;
client_max_body_size 128m;
root "/var/www/vhosts/gxxxxxxx-xxxxxs.de/httpdocs";
access_log "/var/www/vhosts/system/gxxxxxxx-xxxxxs.de/logs/proxy_access_ssl_log";
error_log "/var/www/vhosts/system/gxxxxxxx-xxxxxs.de/logs/proxy_error_log";
add_header X-Cache-Status $upstream_cache_status;
set $no_cache "";
set $cache_cookie $http_cookie;
if ($cache_cookie !~ "^\s*$") {
set $no_cache 1;
}
#extension letsencrypt begin
location ^~ /.well-known/acme-challenge/ {
root /var/www/vhosts/default/htdocs;
types { }
default_type text/plain;
satisfy any;
auth_basic off;
allow all;
location ~ ^/\.well-known/acme-challenge.*/\. {
deny all;
}
}
#extension letsencrypt end
#extension sslit begin
add_header Strict-Transport-Security "max-age=15768000; includeSubDomains" always;
#OCSP Stapling
ssl_stapling on;
ssl_stapling_verify on;
#extension sslit end
#extension sectigo begin
location ^~ /.well-known/pki-validation/fileauth.txt {
try_files $uri $uri/ =404;
}
location ^~ /.well-known/pki-validation/ {
root /var/www/vhosts/default/htdocs;
types { }
default_type text/plain;
satisfy any;
auth_basic off;
allow all;
location ~ ^/\.well-known/pki-validation.*/\. {
deny all;
}
}
#extension sectigo end
location / {
proxy_pass https://[xxxx:xxxx:xxx:xxxx::2]:7081;
proxy_hide_header upgrade;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
access_log off;
proxy_cache_key "$scheme$request_method$host$request_uri";
proxy_no_cache $no_cache $http_pragma $http_authorization $arg_nocache;
proxy_cache_bypass $no_cache $http_pragma $http_authorization $arg_nocache;
proxy_cache gxxxxxxx-xxxxxs.de_proxy;
proxy_cache_valid "5";
proxy_cache_use_stale http_500 http_502 http_503 http_504 updating;
proxy_cache_background_update on;
}
location ~ ^/(plesk-stat|awstats-icon|webstat|webstat-ssl|ftpstat|anon_ftpstat) {
proxy_pass https://[xxxx:xxxx:xxx:xxxx::2]:7081;
proxy_hide_header upgrade;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
access_log off;
}
add_header X-Powered-By PleskLin;
include "/var/www/vhosts/system/gxxxxxxx-xxxxxs.de/conf/vhost_nginx.conf";
}
server {
listen xx.xx.xxx.xxx:80;
server_name gxxxxxxx-xxxxxs.de;
server_name www.gxxxxxxx-xxxxxs.de;
server_name ipv4.gxxxxxxx-xxxxxs.de;
client_max_body_size 128m;
location / {
return 301 https://$host$request_uri;
}
}
server {
listen [xxxx:xxxx:xxx:xxxx::2]:80;
server_name gxxxxxxx-xxxxxs.de;
server_name www.gxxxxxxx-xxxxxs.de;
server_name ipv6.gxxxxxxx-xxxxxs.de;
client_max_body_size 128m;
location / {
return 301 https://$host$request_uri;
}
}
IPv6 steht aber auch drin?sprich der Nginx hört nur auf IPv4
Code:listen xx.xx.xxx.xxx:443 ssl http2;
Ja, hatte gestern zum Test mal alles abgeschaltet, geht trotzdem nicht.@TheRoody Auch sicher, dass die iptables oder Plesk-Firewall oder gar fail2ban nichts blockiert?
plesk repair web /usr/local/psa/admin/sbin/nginxmng --disable plesk installer --select-release-current --remove-component nginxrm /var/www/vhosts/system/.............de/conf/nginx.conf.bakrm /var/www/vhosts/system/.............de/conf/nginx.conf plesk installer --select-release-current --install-component nginx/usr/local/psa/admin/sbin/nginxmng --enableplesk repair webJa, insbesondere wenn man zu hohe Erwartungen bei mangelnder Eigeninitiative gepaart mit fehlendem Grundwissen stellt.Eieiei, vernünftige Antworten sind hier echt Mangelware.
Dann schau zu, dass dein Hetzner-Server auch von außen per IPv4 & IPv6 erreichbar ist, schau in den Hetzner-Robot die IPs nach.dass alle Domains betroffen sind die den AAA Eintrag erhalten. Ich habe es an meinen Hausanschluss nur nicht bemerkt weil dort IPv6 deaktiviert war
#ATTENTION!
#
#DO NOT MODIFY THIS FILE BECAUSE IT WAS GENERATED AUTOMATICALLY,
#SO ALL YOUR CHANGES WILL BE LOST THE NEXT TIME THE FILE IS GENERATED.
proxy_cache_path /var/cache/nginx/gxxxxxxxxxxs.de_proxy levels=1:2 keys_zone=gxxxxxxxxxxs.de_proxy:5m max_size=67108864;
fastcgi_cache_path /var/cache/nginx/gxxxxxxxxxxs.de_fastcgi levels=1:2 keys_zone=gxxxxxxxxxxs.de_fastcgi:5m max_size=67108864;
server {
listen xx.xx.xxx.xxx:443 ssl http2;
server_name gxxxxxxxxxxs.de;
server_name www.gxxxxxxxxxxs.de;
server_name ipv4.gxxxxxxxxxxs.de;
ssl_certificate /opt/psa/var/certificates/scfPLxmZd;
ssl_certificate_key /opt/psa/var/certificates/scfPLxmZd;
client_max_body_size 128m;
root "/var/www/vhosts/gxxxxxxxxxxs.de/httpdocs";
access_log "/var/www/vhosts/system/gxxxxxxxxxxs.de/logs/proxy_access_ssl_log";
error_log "/var/www/vhosts/system/gxxxxxxxxxxs.de/logs/proxy_error_log";
add_header X-Cache-Status $upstream_cache_status;
set $no_cache "";
set $cache_cookie $http_cookie;
if ($cache_cookie !~ "^\s*$") {
set $no_cache 1;
}
#extension letsencrypt begin
location ^~ /.well-known/acme-challenge/ {
root /var/www/vhosts/default/htdocs;
types { }
default_type text/plain;
satisfy any;
auth_basic off;
allow all;
location ~ ^/\.well-known/acme-challenge.*/\. {
deny all;
}
}
#extension letsencrypt end
#extension sslit begin
add_header Strict-Transport-Security "max-age=15768000; includeSubDomains" always;
#OCSP Stapling
ssl_stapling on;
ssl_stapling_verify on;
#extension sslit end
#extension sectigo begin
location ^~ /.well-known/pki-validation/fileauth.txt {
try_files $uri $uri/ =404;
}
location ^~ /.well-known/pki-validation/ {
root /var/www/vhosts/default/htdocs;
types { }
default_type text/plain;
satisfy any;
auth_basic off;
allow all;
location ~ ^/\.well-known/pki-validation.*/\. {
deny all;
}
}
#extension sectigo end
error_page 400 "/error_docs/bad_request.html";
error_page 401 "/error_docs/unauthorized.html";
error_page 403 "/error_docs/forbidden.html";
error_page 404 "/error_docs/not_found.html";
error_page 500 "/error_docs/internal_server_error.html";
error_page 405 "/error_docs/method_not_allowed.html";
error_page 406 "/error_docs/not_acceptable.html";
error_page 407 "/error_docs/proxy_authentication_required.html";
error_page 412 "/error_docs/precondition_failed.html";
error_page 414 "/error_docs/request_uri_too_long.html";
error_page 415 "/error_docs/unsupported_media_type.html";
error_page 501 "/error_docs/not_implemented.html";
error_page 502 "/error_docs/bad_gateway.html";
error_page 503 "/error_docs/maintenance.html";
location ^~ /error_docs {
root "/var/www/vhosts/gxxxxxxxxxxs.de";
}
location / {
proxy_pass https://xx.xx.xxx.xxx:7081;
proxy_hide_header upgrade;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
access_log off;
proxy_cache_key "$scheme$request_method$host$request_uri";
proxy_no_cache $no_cache $http_pragma $http_authorization $arg_nocache;
proxy_cache_bypass $no_cache $http_pragma $http_authorization $arg_nocache;
proxy_cache gxxxxxxxxxxs.de_proxy;
proxy_cache_valid "5";
proxy_cache_use_stale http_500 http_502 http_503 http_504 updating;
proxy_cache_background_update on;
}
location ~ ^/(plesk-stat|awstats-icon|webstat|webstat-ssl|ftpstat|anon_ftpstat) {
proxy_pass https://xx.xx.xxx.xxx:7081;
proxy_hide_header upgrade;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
access_log off;
}
location ~ ^/~(.+?)(/.*?\.php)(/.*)?$ {
alias /var/www/vhosts/gxxxxxxxxxxs.de/web_users/$1/$2;
fastcgi_split_path_info ^((?U).+\.php)(/?.+)$;
try_files $uri $fastcgi_script_name =404;
fastcgi_param PATH_INFO $fastcgi_path_info;
fastcgi_pass "unix:/var/www/vhosts/system/gxxxxxxxxxxs.de/php-fpm.sock";
include /etc/nginx/fastcgi.conf;
fastcgi_cache_key "$scheme$request_method$host$request_uri";
fastcgi_no_cache $no_cache $http_pragma $http_authorization $arg_nocache;
fastcgi_cache_bypass $no_cache $http_pragma $http_authorization $arg_nocache;
fastcgi_cache gxxxxxxxxxxs.de_fastcgi;
fastcgi_cache_valid "5";
fastcgi_cache_use_stale http_500 http_503 updating;
fastcgi_cache_background_update on;
}
location ~ ^/~(.+?)(/.*)?$ {
proxy_pass https://xx.xx.xxx.xxx:7081;
proxy_hide_header upgrade;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
access_log off;
proxy_cache_key "$scheme$request_method$host$request_uri";
proxy_no_cache $no_cache $http_pragma $http_authorization $arg_nocache;
proxy_cache_bypass $no_cache $http_pragma $http_authorization $arg_nocache;
proxy_cache gxxxxxxxxxxs.de_proxy;
proxy_cache_valid "5";
proxy_cache_use_stale http_500 http_502 http_503 http_504 updating;
proxy_cache_background_update on;
}
location ~ \.php(/.*)?$ {
fastcgi_split_path_info ^((?U).+\.php)(/?.+)$;
try_files $uri $fastcgi_script_name =404;
fastcgi_param PATH_INFO $fastcgi_path_info;
fastcgi_pass "unix:/var/www/vhosts/system/gxxxxxxxxxxs.de/php-fpm.sock";
include /etc/nginx/fastcgi.conf;
fastcgi_cache_key "$scheme$request_method$host$request_uri";
fastcgi_no_cache $no_cache $http_pragma $http_authorization $arg_nocache;
fastcgi_cache_bypass $no_cache $http_pragma $http_authorization $arg_nocache;
fastcgi_cache gxxxxxxxxxxs.de_fastcgi;
fastcgi_cache_valid "5";
fastcgi_cache_use_stale http_500 http_503 updating;
fastcgi_cache_background_update on;
}
add_header X-Powered-By PleskLin;
include "/var/www/vhosts/system/gxxxxxxxxxxs.de/conf/vhost_nginx.conf";
}
server {
listen xx.xx.xxx.xxx:80;
server_name gxxxxxxxxxxs.de;
server_name www.gxxxxxxxxxxs.de;
server_name ipv4.gxxxxxxxxxxs.de;
client_max_body_size 128m;
location / {
return 301 https://$host$request_uri;
}
}
Es ist alles drin, und es wird auch nichts geblockt.Dann schau zu, dass dein Hetzner-Server auch von außen per IPv4 & IPv6 erreichbar ist, schau in den Hetzner-Robot die IPs nach.
Wenn ich unter "Abonnements > xxxxxxx.de > Websites & Domains > Einstellungen für Apache & nginx für xxxxxxx.de" bei "nginx-Einstellungen > Proxymodus" den haken entferne, dann funktioniert die Seite.Und funktioniert es vielleicht ohne NGinx nur mit Apache2? Dann kannst du ja den Proxy ausschließen.
/usr/local/psa/admin/sbin/nginxmng --disable plesk installer --select-release-current --remove-component nginxWe use cookies and similar technologies to provide the best experience on our website. You can choose which purposes you consent to. Your choice applies across websites using the same consent framework.
Below you can select which purposes you consent to. Purpose 1 is required for basic website functionality.
Cookies, device or similar online identifiers together with other information can be stored or read on your device for the purposes presented to you.
Ads can be shown to you based on the content you are viewing, the app you are using, your approximate location, or your device type.
A profile can be built about you and your interests to show you personalised ads that are relevant to you.
Personalised ads can be shown to you based on a profile about you.
A profile can be built about you and your interests to show you personalised content that is relevant to you.
Personalised content can be shown to you based on a profile about you.
The performance and effectiveness of ads that you see or interact with can be measured.
The performance and effectiveness of content that you see or interact with can be measured.
Market research can be used to learn more about the audiences who visit sites/apps and view ads.
Your data can be used to improve existing systems and software, and to develop new products.
Content can be selected based on limited data, such as the content you are viewing or the device you are using.
Below is a list of all technology vendors that may process your data. You can enable or disable each vendor individually.