Tschüss!Ihr habt keine Interesse Anfängern zu helfen, ihr habt nur Interesse draufzuhauen. Bis raus.
HTTP/2 502Bitte mal in den Nginx-Error-Logs der Domain nachsehen, die nicht verbindet. Oder passiert das bei allen deinen Domains?
/edit: Nur von externen IPs nicht aufrufbar oder auch lokal vom Ser4ver per curl?
curl -o - -I https://deine-domain.de/
[error] 2165#0: *7750 connect() failed (111: Connection refused) while connecting to upstream, client: bbbb:bb:bbbb:bbbb:bbbb:bbbb:bbbb:bbbb, server: gxxxxxxx-xxxxxs.de, request: "GET / HTTP/2.0", upstream: "https://[xxxx:xxxx:xxx:xxxx::2]:7081/", host: "gxxxxxxx-xxxxxs.de"
[error] 2165#0: *7779 connect() failed (111: Connection refused) while connecting to upstream, client: bbbb:bb:bbbb:bbbb:bbbb:bbbb:bbbb:bbbb, server: gxxxxxxx-xxxxxs.de, request: "GET / HTTP/2.0", upstream: "https://[xxxx:xxxx:xxx:xxxx::2]:7081/", host: "gxxxxxxx-xxxxxs.de"
Ich kann dir versichern, daß hier niemand "draufhauen" will.Ihr habt keine Interesse Anfängern zu helfen, ihr habt nur Interesse draufzuhauen.
root@xxxx /etc/nginx/plesk.conf.d/vhosts # cat /var/www/vhosts/system/gxxxxxxx-xxxxxs.de/conf/nginx.conf
#ATTENTION!
#
#DO NOT MODIFY THIS FILE BECAUSE IT WAS GENERATED AUTOMATICALLY,
#SO ALL YOUR CHANGES WILL BE LOST THE NEXT TIME THE FILE IS GENERATED.
proxy_cache_path /var/cache/nginx/gxxxxxxx-xxxxxs.de_proxy levels=1:2 keys_zone=gxxxxxxx-xxxxxs.de_proxy:5m max_size=67108864;
server {
listen xx.xx.xxx.xxx:443 ssl http2;
server_name gxxxxxxx-xxxxxs.de;
server_name www.gxxxxxxx-xxxxxs.de;
server_name ipv4.gxxxxxxx-xxxxxs.de;
ssl_certificate /opt/psa/var/certificates/scfPLxmZd;
ssl_certificate_key /opt/psa/var/certificates/scfPLxmZd;
client_max_body_size 128m;
root "/var/www/vhosts/gxxxxxxx-xxxxxs.de/httpdocs";
access_log "/var/www/vhosts/system/gxxxxxxx-xxxxxs.de/logs/proxy_access_ssl_log";
error_log "/var/www/vhosts/system/gxxxxxxx-xxxxxs.de/logs/proxy_error_log";
add_header X-Cache-Status $upstream_cache_status;
set $no_cache "";
set $cache_cookie $http_cookie;
if ($cache_cookie !~ "^\s*$") {
set $no_cache 1;
}
#extension letsencrypt begin
location ^~ /.well-known/acme-challenge/ {
root /var/www/vhosts/default/htdocs;
types { }
default_type text/plain;
satisfy any;
auth_basic off;
allow all;
location ~ ^/\.well-known/acme-challenge.*/\. {
deny all;
}
}
#extension letsencrypt end
#extension sslit begin
add_header Strict-Transport-Security "max-age=15768000; includeSubDomains" always;
#OCSP Stapling
ssl_stapling on;
ssl_stapling_verify on;
#extension sslit end
#extension sectigo begin
location ^~ /.well-known/pki-validation/fileauth.txt {
try_files $uri $uri/ =404;
}
location ^~ /.well-known/pki-validation/ {
root /var/www/vhosts/default/htdocs;
types { }
default_type text/plain;
satisfy any;
auth_basic off;
allow all;
location ~ ^/\.well-known/pki-validation.*/\. {
deny all;
}
}
#extension sectigo end
location / {
proxy_pass https://xx.xx.xxx.xxx:7081;
proxy_hide_header upgrade;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
access_log off;
proxy_cache_key "$scheme$request_method$host$request_uri";
proxy_no_cache $no_cache $http_pragma $http_authorization $arg_nocache;
proxy_cache_bypass $no_cache $http_pragma $http_authorization $arg_nocache;
proxy_cache gxxxxxxx-xxxxxs.de_proxy;
proxy_cache_valid "5";
proxy_cache_use_stale http_500 http_502 http_503 http_504 updating;
proxy_cache_background_update on;
}
location ~ ^/(plesk-stat|awstats-icon|webstat|webstat-ssl|ftpstat|anon_ftpstat) {
proxy_pass https://xx.xx.xxx.xxx:7081;
proxy_hide_header upgrade;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
access_log off;
}
add_header X-Powered-By PleskLin;
include "/var/www/vhosts/system/gxxxxxxx-xxxxxs.de/conf/vhost_nginx.conf";
}
server {
listen [xxxx:xxxx:xxx:xxxx::2]:443 ssl http2;
server_name gxxxxxxx-xxxxxs.de;
server_name www.gxxxxxxx-xxxxxs.de;
server_name ipv6.gxxxxxxx-xxxxxs.de;
ssl_certificate /opt/psa/var/certificates/scfPLxmZd;
ssl_certificate_key /opt/psa/var/certificates/scfPLxmZd;
client_max_body_size 128m;
root "/var/www/vhosts/gxxxxxxx-xxxxxs.de/httpdocs";
access_log "/var/www/vhosts/system/gxxxxxxx-xxxxxs.de/logs/proxy_access_ssl_log";
error_log "/var/www/vhosts/system/gxxxxxxx-xxxxxs.de/logs/proxy_error_log";
add_header X-Cache-Status $upstream_cache_status;
set $no_cache "";
set $cache_cookie $http_cookie;
if ($cache_cookie !~ "^\s*$") {
set $no_cache 1;
}
#extension letsencrypt begin
location ^~ /.well-known/acme-challenge/ {
root /var/www/vhosts/default/htdocs;
types { }
default_type text/plain;
satisfy any;
auth_basic off;
allow all;
location ~ ^/\.well-known/acme-challenge.*/\. {
deny all;
}
}
#extension letsencrypt end
#extension sslit begin
add_header Strict-Transport-Security "max-age=15768000; includeSubDomains" always;
#OCSP Stapling
ssl_stapling on;
ssl_stapling_verify on;
#extension sslit end
#extension sectigo begin
location ^~ /.well-known/pki-validation/fileauth.txt {
try_files $uri $uri/ =404;
}
location ^~ /.well-known/pki-validation/ {
root /var/www/vhosts/default/htdocs;
types { }
default_type text/plain;
satisfy any;
auth_basic off;
allow all;
location ~ ^/\.well-known/pki-validation.*/\. {
deny all;
}
}
#extension sectigo end
location / {
proxy_pass https://[xxxx:xxxx:xxx:xxxx::2]:7081;
proxy_hide_header upgrade;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
access_log off;
proxy_cache_key "$scheme$request_method$host$request_uri";
proxy_no_cache $no_cache $http_pragma $http_authorization $arg_nocache;
proxy_cache_bypass $no_cache $http_pragma $http_authorization $arg_nocache;
proxy_cache gxxxxxxx-xxxxxs.de_proxy;
proxy_cache_valid "5";
proxy_cache_use_stale http_500 http_502 http_503 http_504 updating;
proxy_cache_background_update on;
}
location ~ ^/(plesk-stat|awstats-icon|webstat|webstat-ssl|ftpstat|anon_ftpstat) {
proxy_pass https://[xxxx:xxxx:xxx:xxxx::2]:7081;
proxy_hide_header upgrade;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
access_log off;
}
add_header X-Powered-By PleskLin;
include "/var/www/vhosts/system/gxxxxxxx-xxxxxs.de/conf/vhost_nginx.conf";
}
server {
listen xx.xx.xxx.xxx:80;
server_name gxxxxxxx-xxxxxs.de;
server_name www.gxxxxxxx-xxxxxs.de;
server_name ipv4.gxxxxxxx-xxxxxs.de;
client_max_body_size 128m;
location / {
return 301 https://$host$request_uri;
}
}
server {
listen [xxxx:xxxx:xxx:xxxx::2]:80;
server_name gxxxxxxx-xxxxxs.de;
server_name www.gxxxxxxx-xxxxxs.de;
server_name ipv6.gxxxxxxx-xxxxxs.de;
client_max_body_size 128m;
location / {
return 301 https://$host$request_uri;
}
}
IPv6 steht aber auch drin?sprich der Nginx hört nur auf IPv4
Code:listen xx.xx.xxx.xxx:443 ssl http2;
Ja, hatte gestern zum Test mal alles abgeschaltet, geht trotzdem nicht.@TheRoody Auch sicher, dass die iptables oder Plesk-Firewall oder gar fail2ban nichts blockiert?
plesk repair web /usr/local/psa/admin/sbin/nginxmng --disable plesk installer --select-release-current --remove-component nginxrm /var/www/vhosts/system/.............de/conf/nginx.conf.bakrm /var/www/vhosts/system/.............de/conf/nginx.conf plesk installer --select-release-current --install-component nginx/usr/local/psa/admin/sbin/nginxmng --enableplesk repair webJa, insbesondere wenn man zu hohe Erwartungen bei mangelnder Eigeninitiative gepaart mit fehlendem Grundwissen stellt.Eieiei, vernünftige Antworten sind hier echt Mangelware.
Dann schau zu, dass dein Hetzner-Server auch von außen per IPv4 & IPv6 erreichbar ist, schau in den Hetzner-Robot die IPs nach.dass alle Domains betroffen sind die den AAA Eintrag erhalten. Ich habe es an meinen Hausanschluss nur nicht bemerkt weil dort IPv6 deaktiviert war
#ATTENTION!
#
#DO NOT MODIFY THIS FILE BECAUSE IT WAS GENERATED AUTOMATICALLY,
#SO ALL YOUR CHANGES WILL BE LOST THE NEXT TIME THE FILE IS GENERATED.
proxy_cache_path /var/cache/nginx/gxxxxxxxxxxs.de_proxy levels=1:2 keys_zone=gxxxxxxxxxxs.de_proxy:5m max_size=67108864;
fastcgi_cache_path /var/cache/nginx/gxxxxxxxxxxs.de_fastcgi levels=1:2 keys_zone=gxxxxxxxxxxs.de_fastcgi:5m max_size=67108864;
server {
listen xx.xx.xxx.xxx:443 ssl http2;
server_name gxxxxxxxxxxs.de;
server_name www.gxxxxxxxxxxs.de;
server_name ipv4.gxxxxxxxxxxs.de;
ssl_certificate /opt/psa/var/certificates/scfPLxmZd;
ssl_certificate_key /opt/psa/var/certificates/scfPLxmZd;
client_max_body_size 128m;
root "/var/www/vhosts/gxxxxxxxxxxs.de/httpdocs";
access_log "/var/www/vhosts/system/gxxxxxxxxxxs.de/logs/proxy_access_ssl_log";
error_log "/var/www/vhosts/system/gxxxxxxxxxxs.de/logs/proxy_error_log";
add_header X-Cache-Status $upstream_cache_status;
set $no_cache "";
set $cache_cookie $http_cookie;
if ($cache_cookie !~ "^\s*$") {
set $no_cache 1;
}
#extension letsencrypt begin
location ^~ /.well-known/acme-challenge/ {
root /var/www/vhosts/default/htdocs;
types { }
default_type text/plain;
satisfy any;
auth_basic off;
allow all;
location ~ ^/\.well-known/acme-challenge.*/\. {
deny all;
}
}
#extension letsencrypt end
#extension sslit begin
add_header Strict-Transport-Security "max-age=15768000; includeSubDomains" always;
#OCSP Stapling
ssl_stapling on;
ssl_stapling_verify on;
#extension sslit end
#extension sectigo begin
location ^~ /.well-known/pki-validation/fileauth.txt {
try_files $uri $uri/ =404;
}
location ^~ /.well-known/pki-validation/ {
root /var/www/vhosts/default/htdocs;
types { }
default_type text/plain;
satisfy any;
auth_basic off;
allow all;
location ~ ^/\.well-known/pki-validation.*/\. {
deny all;
}
}
#extension sectigo end
error_page 400 "/error_docs/bad_request.html";
error_page 401 "/error_docs/unauthorized.html";
error_page 403 "/error_docs/forbidden.html";
error_page 404 "/error_docs/not_found.html";
error_page 500 "/error_docs/internal_server_error.html";
error_page 405 "/error_docs/method_not_allowed.html";
error_page 406 "/error_docs/not_acceptable.html";
error_page 407 "/error_docs/proxy_authentication_required.html";
error_page 412 "/error_docs/precondition_failed.html";
error_page 414 "/error_docs/request_uri_too_long.html";
error_page 415 "/error_docs/unsupported_media_type.html";
error_page 501 "/error_docs/not_implemented.html";
error_page 502 "/error_docs/bad_gateway.html";
error_page 503 "/error_docs/maintenance.html";
location ^~ /error_docs {
root "/var/www/vhosts/gxxxxxxxxxxs.de";
}
location / {
proxy_pass https://xx.xx.xxx.xxx:7081;
proxy_hide_header upgrade;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
access_log off;
proxy_cache_key "$scheme$request_method$host$request_uri";
proxy_no_cache $no_cache $http_pragma $http_authorization $arg_nocache;
proxy_cache_bypass $no_cache $http_pragma $http_authorization $arg_nocache;
proxy_cache gxxxxxxxxxxs.de_proxy;
proxy_cache_valid "5";
proxy_cache_use_stale http_500 http_502 http_503 http_504 updating;
proxy_cache_background_update on;
}
location ~ ^/(plesk-stat|awstats-icon|webstat|webstat-ssl|ftpstat|anon_ftpstat) {
proxy_pass https://xx.xx.xxx.xxx:7081;
proxy_hide_header upgrade;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
access_log off;
}
location ~ ^/~(.+?)(/.*?\.php)(/.*)?$ {
alias /var/www/vhosts/gxxxxxxxxxxs.de/web_users/$1/$2;
fastcgi_split_path_info ^((?U).+\.php)(/?.+)$;
try_files $uri $fastcgi_script_name =404;
fastcgi_param PATH_INFO $fastcgi_path_info;
fastcgi_pass "unix:/var/www/vhosts/system/gxxxxxxxxxxs.de/php-fpm.sock";
include /etc/nginx/fastcgi.conf;
fastcgi_cache_key "$scheme$request_method$host$request_uri";
fastcgi_no_cache $no_cache $http_pragma $http_authorization $arg_nocache;
fastcgi_cache_bypass $no_cache $http_pragma $http_authorization $arg_nocache;
fastcgi_cache gxxxxxxxxxxs.de_fastcgi;
fastcgi_cache_valid "5";
fastcgi_cache_use_stale http_500 http_503 updating;
fastcgi_cache_background_update on;
}
location ~ ^/~(.+?)(/.*)?$ {
proxy_pass https://xx.xx.xxx.xxx:7081;
proxy_hide_header upgrade;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
access_log off;
proxy_cache_key "$scheme$request_method$host$request_uri";
proxy_no_cache $no_cache $http_pragma $http_authorization $arg_nocache;
proxy_cache_bypass $no_cache $http_pragma $http_authorization $arg_nocache;
proxy_cache gxxxxxxxxxxs.de_proxy;
proxy_cache_valid "5";
proxy_cache_use_stale http_500 http_502 http_503 http_504 updating;
proxy_cache_background_update on;
}
location ~ \.php(/.*)?$ {
fastcgi_split_path_info ^((?U).+\.php)(/?.+)$;
try_files $uri $fastcgi_script_name =404;
fastcgi_param PATH_INFO $fastcgi_path_info;
fastcgi_pass "unix:/var/www/vhosts/system/gxxxxxxxxxxs.de/php-fpm.sock";
include /etc/nginx/fastcgi.conf;
fastcgi_cache_key "$scheme$request_method$host$request_uri";
fastcgi_no_cache $no_cache $http_pragma $http_authorization $arg_nocache;
fastcgi_cache_bypass $no_cache $http_pragma $http_authorization $arg_nocache;
fastcgi_cache gxxxxxxxxxxs.de_fastcgi;
fastcgi_cache_valid "5";
fastcgi_cache_use_stale http_500 http_503 updating;
fastcgi_cache_background_update on;
}
add_header X-Powered-By PleskLin;
include "/var/www/vhosts/system/gxxxxxxxxxxs.de/conf/vhost_nginx.conf";
}
server {
listen xx.xx.xxx.xxx:80;
server_name gxxxxxxxxxxs.de;
server_name www.gxxxxxxxxxxs.de;
server_name ipv4.gxxxxxxxxxxs.de;
client_max_body_size 128m;
location / {
return 301 https://$host$request_uri;
}
}
Es ist alles drin, und es wird auch nichts geblockt.Dann schau zu, dass dein Hetzner-Server auch von außen per IPv4 & IPv6 erreichbar ist, schau in den Hetzner-Robot die IPs nach.
Wenn ich unter "Abonnements > xxxxxxx.de > Websites & Domains > Einstellungen für Apache & nginx für xxxxxxx.de" bei "nginx-Einstellungen > Proxymodus" den haken entferne, dann funktioniert die Seite.Und funktioniert es vielleicht ohne NGinx nur mit Apache2? Dann kannst du ja den Proxy ausschließen.
/usr/local/psa/admin/sbin/nginxmng --disable plesk installer --select-release-current --remove-component nginx