Skip to content

nginx can't start again

Moved Solved Configure
20 4 6.5k 1
  • normally, the ssl parameter must be enabled on listening sockets in the server block

    Backup the conf file before and test that

    unfortunately I have to leave

    wrote on last edited by
    #7

    @downpw not work

  • wrote on last edited by
    #8

    @justoverclock I can get to this in around an hour

  • wrote on last edited by justoverclock
    #9

    @justoverclock done, i’ve removed that line and works again

    @phenomlab fixed it, removed the two lines and all works again

  • @justoverclock done, i’ve removed that line and works again

    @phenomlab fixed it, removed the two lines and all works again

    wrote on last edited by phenomlab
    #10

    @justoverclock good 😁

    What caused the issue ? Was something new added to nginx.conf ?

  • wrote on last edited by
    #11

    @justoverclock you should also change this line

    client_max_body_size 5G;
    

    That could expose your server to a denial of service if someone decides to upload that large a file.

  • wrote on last edited by DownPW
    #12

    @justoverclock

    this line ?

        ssl_certificate /home/justoverclock/ssl.combined;
        ssl_certificate_key /home/justoverclock/ssl.key;
    
  • @justoverclock

    this line ?

        ssl_certificate /home/justoverclock/ssl.combined;
        ssl_certificate_key /home/justoverclock/ssl.key;
    
    wrote on last edited by
    #13

    @downpw yep exactly

  • @downpw yep exactly

    wrote on last edited by phenomlab
    #14

    @justoverclock those two lines

    ssl_certificate /etc/letsencrypt/live/justoverclock.it-0001/fullchain.pem; # managed by Certbot
    ssl_certificate_key /etc/letsencrypt/live/justoverclock.it-0001/privkey.pem; # managed by Certbot
    

    Are issued by certbot, but aren’t normally positioned in the server block. Very odd.

  • phenomlab phenomlab has marked this topic as solved on
  • hello guys again, something odd happened today, i’ve noticed that my website was down, it show

    err connection refused
    

    i’ve tried to restart nginx but i get some error that i’m not understand…

    root@:~# sudo service nginx restart
    Job for nginx.service failed because the control process exited with error code.
    See "systemctl status nginx.service" and "journalctl -xe" for details.
    root@:~# sudo service nginx start
    Job for nginx.service failed because the control process exited with error code.
    See "systemctl status nginx.service" and "journalctl -xe" for details.
    
    Jan 22 14:22:43 justoverclock.it systemd[1]: Starting A high performance web server and a reverse proxy server>
    Jan 22 14:22:43 justoverclock.it nginx[2386]: nginx: [emerg] "ssl_certificate" directive is not allowed here i>
    Jan 22 14:22:43 justoverclock.it nginx[2386]: nginx: configuration file /etc/nginx/nginx.conf test failed
    Jan 22 14:22:43 justoverclock.it systemd[1]: nginx.service: Control process exited, code=exited, status=1/FAIL>
    Jan 22 14:22:43 justoverclock.it systemd[1]: nginx.service: Failed with result 'exit-code'.
    Jan 22 14:22:43 justoverclock.it systemd[1]: Failed to start A high performance web server and a reverse proxy
    
    wrote on last edited by phenomlab
    #15

    @justoverclock
    I have not yet gone through the comments to see what they answered you,
    But never restart Nginx before checking that all the blocks are working properly (this is how you check: sudo nginx -t)
    When nginx is restarted with an error it causes all sites (error 521) to shut down until the fault is resolved.
    If the test passed successfully you can restart Nginx (how to run: sudo systemctl reload nginx)

  • @justoverclock
    I have not yet gone through the comments to see what they answered you,
    But never restart Nginx before checking that all the blocks are working properly (this is how you check: sudo nginx -t)
    When nginx is restarted with an error it causes all sites (error 521) to shut down until the fault is resolved.
    If the test passed successfully you can restart Nginx (how to run: sudo systemctl reload nginx)

    wrote on last edited by
    #16

    @elhana-fine Also worth noting that nginx -t is not disruptive, and will not cause your sites to go offline in the event that the test fails.

  • @elhana-fine Also worth noting that nginx -t is not disruptive, and will not cause your sites to go offline in the event that the test fails.

    wrote on last edited by
    #17

    @phenomlab
    I am writing this from past experience.
    Whenever the test failed, all sites on the server were shut down (and returned error 521/502)
    Maybe I’m wrong, I write my experiences

  • @phenomlab
    I am writing this from past experience.
    Whenever the test failed, all sites on the server were shut down (and returned error 521/502)
    Maybe I’m wrong, I write my experiences

    wrote on last edited by
    #18

    @elhana-fine Interesting. That shouldn’t happen with a test. It’s supposed to be a dry run.

  • @elhana-fine Interesting. That shouldn’t happen with a test. It’s supposed to be a dry run.

    wrote on last edited by
    #19

    @phenomlab
    I mean when the test failed and I restarted the nginx with the error (sudo systemctl reload nginx)
    Apparently an error in one block in Nginx affects all blocks.

  • @phenomlab
    I mean when the test failed and I restarted the nginx with the error (sudo systemctl reload nginx)
    Apparently an error in one block in Nginx affects all blocks.

    wrote on last edited by phenomlab
    #20

    @elhana-fine Yes that will happen of course if you still choose to restart the NGINX service after making a change and the test fails. The test on it’s own will state the error and the line number allowing you to fix that first 🙂


Did this solution help you?
Did you find the suggested solution useful? Support 💗 Sudonix with a coffee ☕
If your organisation needs deeper expertise around infrastructure, security, or technology leadership, learn more about Phenomlab Ltd. Many of the deeper technical guides behind Sudonix are published there.

Related Topics
  • 1 Votes
    3 Posts
    1k Views
    DownPW
    @phenomlab said: If you bypass or disable cloudflare, does the problem subside? I will test that tonight. I have create waf rules on CF and page rule for ignore socket.io… [image: e1ff1160-846d-4aad-ab06-5070485b0f43-image.jpeg] [image: 577c9be8-cec3-4b81-b0a5-8b9c315eabee-image.jpeg]
  • Arch Server Progress

    Chitchat arch linux server web server
    64
    31 Votes
    64 Posts
    28k Views
    Madchatthew
    @phenomlab I think I am going to switch to this theme eventually. The one I have is ok, but the price for this theme and what you get with it is really good. The business has broken even and is actually making some money now. We will see what the future holds. I am hoping to start getting enough business so I am behind 2 to 3 months. So we will see. My Arch web server has been working great! No issues with it so far. The only thing lately was the mail server software being updated, and they broke everything. I was able to make the required changes and get it back working and it has been working amazingly so far. I am still really happy I switched to Arch Linux Server and I haven’t had to reinstall the whole operating system due to this switch.
  • 3 Votes
    6 Posts
    4k Views
    phenomlab
    @DownPW said in Nginx core developer quits project in security dispute, starts “freenginx” fork: Maybe virtualmin implement it in the future… I don’t think they will - my guess is that they will stick with the current branch of NGINX. I’ve not personally tested it, but the GIT page seems to be very active. This is equally impressive [image: 8ac0d197-68fa-4bd8-bfa3-87237bf8f1f4-image.png] I think the most impressive on here is the native support of HTTP 3
  • Getting Eror When Started NodeBB

    Solved Configure bug
    7
    1
    2 Votes
    7 Posts
    2k Views
    cagatay
    @phenomlab yes i did. i deleted one of plugin then it started to work normally.
  • Error certification on virtualmin/Nginx

    Solved Linux cert virtualmin nginx
    17
    2
    0 Votes
    17 Posts
    7k Views
    phenomlab
    @DownPW anytime
  • NodeBB v2.4.0

    Solved General nodebb version error
    3
    1
    2 Votes
    3 Posts
    2k Views
    Sampo2910
    @phenomlab As always…Thank you. Worked for me.
  • Cannot read property 'config' of undefined

    Solved Configure
    1
    0 Votes
    1 Posts
    945 Views
    No one has replied
  • nginx seo urls

    Solved Configure
    15
    3 Votes
    15 Posts
    6k Views
    phenomlab
    @riekmedia that looks fine to me