Pydio et sous domaine

Ce site est optimisé pour être consulté depuis un navigateur moderne dans lequel JavaScript est activé.

Pydio et sous domaine

majaxx

Bonjour ,
je dispose d'un KS3 fonctionnant sous Vmware ESXI avec plusieurs machine dessus avec un nom de domaine en .tk !
Sur ma 1ere machine je dispose de Plex transmission et ezseed et j'ai reussi a mettre en place le reverse proxy avec NGINX

Sur la Seconde machine j'ai alors installé Pydio , sur un Debian 8 et la impossible de mettre en place le sous domaine pydio.****.tk
Je dois mal m'y prendre et j'ai du mal a comprendre je pense !
Je vous joint mon fichier de conf
Merci pour votre aide

server {
        server_name pydio.****.tk;
        listen 80;

              rewrite ^ https://$server_name$request_uri? permanent;
}
server {
        server_name pydio.****tk;
        root /var/www/;
        index index.php;
        listen 443 ssl;
        keepalive_requests    10;
        keepalive_timeout     60 60;
        access_log /var/log/nginx/access_pydio6_log;
        error_log /var/log/nginx/error_pydio6_log;
        ssl_certificate     /etc/ssl/localcerts/nginx_pydio.pem;
        ssl_certificate_key /etc/ssl/localcerts/nginx_pydio.key;

        client_max_body_size 15M;
        client_body_buffer_size 128k;

        rewrite ^/dashboard|^/settings|^/welcome|^/ws- /index.php last;
        if ( !-e $request_filename ) {
                # WebDAV Rewrites
                rewrite ^/shares /dav.php last;
                # Sync client
                rewrite ^/api /rest.php last;
                # External users
                rewrite ^/user ./index.php?get_action=user_access_point last;
                # Public shares
                rewrite ^/data/public/([a-zA-Z0-9_-]+)\.php$ /data/public/share.php?hash=$1?;
        }
        rewrite ^/data/public/([a-zA-Z0-9_-]+)--([a-z]+)$ /data/public/share.php?hash=$1&lang=$2?;
        rewrite ^/data/public/([a-zA-Z0-9_-]+)$ /data/public/share.php?hash=$1?;

        # Prevent Clickjacking
        add_header X-Frame-Options "SAMEORIGIN";

        # Only allow these request methods and do not accept DELETE, SEARCH and other methods
        if ( $request_method !~ ^(GET|HEAD|POST|PROPFIND|OPTIONS)$ ) {
                return 444;
        }

        location ~* ^/(?:\.|conf|data/(?:files|personal|logs|plugins|tmp|cache)|plugins/editor.zoho/agent/files) {
                deny all;
        }
        # Enables PHP
        location ~ \.php$ {
                # for ^/(index|plugins) request_uri should be changed
                set $request_url $request_uri;
                if ( $uri ~ ^/(index|plugins) ) {
                        set $request_url /

                # External users
                rewrite ^/user ./index.php?get_action=user_access_point last;
                # Public shares
                rewrite ^/data/public/([a-zA-Z0-9_-]+)\.php$ /data/public/share.php?hash=$1?;
        }
        rewrite ^/data/public/([a-zA-Z0-9_-]+)--([a-z]+)$ /data/public/share.php?hash=$1&lang=$2?;
        rewrite ^/data/public/([a-zA-Z0-9_-]+)$ /data/public/share.php?hash=$1?;

        # Prevent Clickjacking
        add_header X-Frame-Options "SAMEORIGIN";

        # Only allow these request methods and do not accept DELETE, SEARCH and other methods
        if ( $request_method !~ ^(GET|HEAD|POST|PROPFIND|OPTIONS)$ ) {
                return 444;
        }

        location ~* ^/(?:\.|conf|data/(?:files|personal|logs|plugins|tmp|cache)|plugins/editor.zoho/agent/files) {
                deny all;
        }
        # Enables PHP
        location ~ \.php$ {
                # for ^/(index|plugins) request_uri should be changed
                set $request_url $request_uri;
                if ( $uri ~ ^/(index|plugins) ) {
                        set $request_url /;
                }
                include fastcgi.conf;
                fastcgi_param  REQUEST_URI $request_url;
                try_files $uri =404;
                fastcgi_pass 127.0.0.1:7777;
        }

       # Enables Caching
        location ~* \.(ico|css|js)$ {
                 expires 7d;
                add_header Pragma public;
                add_header Cache-Control "public, must-revalidate, proxy-revalidate";
        }
}

Solinvictus

A première vue, ne faudrait-il pas "simplement" renseigner ton vhost, à cette variable, ainsi :

root /var/www/pydio

majaxx

Non la variable de mon Vhost est OK , je precise j'ai une ipv4 pour plusieurs machines virtuel
J'arrive a accéder a pydio depuis internet maintenant : https://IP:3443 , mais toujours pas du sous domaine

J'ai modifié mon vhost

upstream pydio {
    server  pydio.***.tk:3443;
}
server {
        server_name  pydio.**.tk;
        listen 3001;

              rewrite ^ https://$server_name$request_uri? permanent;
}
server {
        server_name  pydio.**.tk;
        root /var/www/;
        index index.php;
        listen 3443 ssl;
        keepalive_requests    10;
        keepalive_timeout     60 60;
        access_log /var/log/nginx/access_pydio6_log;
        error_log /var/log/nginx/error_pydio6_log;
        ssl_certificate     /etc/ssl/localcerts/nginx_pydio.pem;
        ssl_certificate_key /etc/ssl/localcerts/nginx_pydio.key;

        client_max_body_size 15M;
        client_body_buffer_size 128k;

        rewrite ^/dashboard|^/settings|^/welcome|^/ws- /index.php last;
        if ( !-e $request_filename ) {
                # WebDAV Rewrites
                rewrite ^/shares /dav.php last;
                # Sync client
                rewrite ^/api /rest.php last;
                # External users
                rewrite ^/user ./index.php?get_action=user_access_point last;
                # Public shares
                rewrite ^/data/public/([a-zA-Z0-9_-]+)\.php$ /data/public/share.php?hash=$1?;
        }
        rewrite ^/data/public/([a-zA-Z0-9_-]+)--([a-z]+)$ /data/public/share.php?hash=$1&lang=$2?;
        rewrite ^/data/public/([a-zA-Z0-9_-]+)$ /data/public/share.php?hash=$1?;

        # Prevent Clickjacking
        add_header X-Frame-Options "SAMEORIGIN";

        # Only allow these request methods and do not accept DELETE, SEARCH and other methods
        if ( $request_method !~ ^(GET|HEAD|POST|PROPFIND|OPTIONS)$ ) {
                return 444;
        }

        location ~* ^/(?:\.|conf|data/(?:files|personal|logs|plugins|tmp|cache)|plugins/editor.zoho/agent/files) {
                deny all;
        }
        # Enables PHP
        location ~ \.php$ {
                # for ^/(index|plugins) request_uri should be changed

                rewrite ^/shares /dav.php last;
                # Sync client
                rewrite ^/api /rest.php last;
                # External users
                rewrite ^/user ./index.php?get_action=user_access_point last;
                # Public shares
                rewrite ^/data/public/([a-zA-Z0-9_-]+)\.php$ /data/public/share.php?hash=$1?;
        }
        rewrite ^/data/public/([a-zA-Z0-9_-]+)--([a-z]+)$ /data/public/share.php?hash=$1&lang=$2?;
        rewrite ^/data/public/([a-zA-Z0-9_-]+)$ /data/public/share.php?hash=$1?;

        # Prevent Clickjacking
        add_header X-Frame-Options "SAMEORIGIN";

        # Only allow these request methods and do not accept DELETE, SEARCH and other methods
        if ( $request_method !~ ^(GET|HEAD|POST|PROPFIND|OPTIONS)$ ) {
                return 444;
        }

        location ~* ^/(?:\.|conf|data/(?:files|personal|logs|plugins|tmp|cache)|plugins/editor.zoho/agent/files) {
                deny all;
        }
        # Enables PHP
        location ~ \.php$ {
                # for ^/(index|plugins) request_uri should be changed
                set $request_url $request_uri;
                if ( $uri ~ ^/(index|plugins) ) {
                        set $request_url /;
                }
                include fastcgi.conf;
                fastcgi_param  REQUEST_URI $request_url;
                try_files $uri =404;
                fastcgi_pass 127.0.0.1:7777;
        }

       # Enables Caching
        location ~* \.(ico|css|js)$ {
                 expires 7d;
                add_header Pragma public;
                add_header Cache-Control "public, must-revalidate, proxy-revalidate";
        }
}
server {
        listen 80;
        server_name pydio.***.tk;
        location / {
                proxy_pass https://127.0.0.1:3443/;
        satisfy any;
        allow all;
       }
}

Solinvictus

J'avoue ne pas comprendre ton fichier de configuration: tu as plusieurs directives "server", un "upstream" et un "proxy_pass", et certainement des choses que je n'ai pas encore vues... Tu l'as pris quelque part ou c'est une "création" ?

majaxx

Je pense avoir trouvé .. je fait un retour d'ici peu

majaxx

Resolu :
Finalement , mon sous-domaine redirigé toujours vers ma machine 1 :
J'ai donc ajouté a la machine 1 le vhost ci :

server {
    listen 80;
    server_name pydio.****.tk;

    location / {
       proxy_pass https://192.168.1.116:3443;
    }


}

et sur la machine 2 ou il y a Pydio le vhost la :

server {
        server_name  pydio.**.tk;
        listen 3001;

              rewrite ^ https://$server_name$request_uri? permanent;
}
server {
        server_name  pydio.**.tk;
        root /var/www/;
        index index.php;
        listen 3443 ssl;
        keepalive_requests    10;
        keepalive_timeout     60 60;
        access_log /var/log/nginx/access_pydio6_log;
        error_log /var/log/nginx/error_pydio6_log;
        ssl_certificate     /etc/ssl/localcerts/nginx_pydio.pem;
        ssl_certificate_key /etc/ssl/localcerts/nginx_pydio.key;

        client_max_body_size 15M;
        client_body_buffer_size 128k;

        rewrite ^/dashboard|^/settings|^/welcome|^/ws- /index.php last;
        if ( !-e $request_filename ) {
                # WebDAV Rewrites
                rewrite ^/shares /dav.php last;
                # Sync client
                rewrite ^/api /rest.php last;
                # External users
                rewrite ^/user ./index.php?get_action=user_access_point last;
                # Public shares
                rewrite ^/data/public/([a-zA-Z0-9_-]+)\.php$ /data/public/share.php?hash=$1?;
        }
        rewrite ^/data/public/([a-zA-Z0-9_-]+)--([a-z]+)$ /data/public/share.php?hash=$1&lang=$2?;
        rewrite ^/data/public/([a-zA-Z0-9_-]+)$ /data/public/share.php?hash=$1?;

        # Prevent Clickjacking
        add_header X-Frame-Options "SAMEORIGIN";

        # Only allow these request methods and do not accept DELETE, SEARCH and other methods
        if ( $request_method !~ ^(GET|HEAD|POST|PROPFIND|OPTIONS)$ ) {
                return 444;
        }

        location ~* ^/(?:\.|conf|data/(?:files|personal|logs|plugins|tmp|cache)|plugins/editor.zoho/agent/files) {
                deny all;
        }
        # Enables PHP
        location ~ \.php$ {
                # for ^/(index|plugins) request_uri should be changed

                rewrite ^/shares /dav.php last;
                # Sync client
                rewrite ^/api /rest.php last;
                # External users
                rewrite ^/user ./index.php?get_action=user_access_point last;
                # Public shares
                rewrite ^/data/public/([a-zA-Z0-9_-]+)\.php$ /data/public/share.php?hash=$1?;
        }
        rewrite ^/data/public/([a-zA-Z0-9_-]+)--([a-z]+)$ /data/public/share.php?hash=$1&lang=$2?;
        rewrite ^/data/public/([a-zA-Z0-9_-]+)$ /data/public/share.php?hash=$1?;

        # Prevent Clickjacking
        add_header X-Frame-Options "SAMEORIGIN";

        # Only allow these request methods and do not accept DELETE, SEARCH and other methods
        if ( $request_method !~ ^(GET|HEAD|POST|PROPFIND|OPTIONS)$ ) {
                return 444;
        }

        location ~* ^/(?:\.|conf|data/(?:files|personal|logs|plugins|tmp|cache)|plugins/editor.zoho/agent/files) {
                deny all;
        }
        # Enables PHP
        location ~ \.php$ {
                # for ^/(index|plugins) request_uri should be changed
                set $request_url $request_uri;
                if ( $uri ~ ^/(index|plugins) ) {
                        set $request_url /;
                }
                include fastcgi.conf;
                fastcgi_param  REQUEST_URI $request_url;
                try_files $uri =404;
                fastcgi_pass 127.0.0.1:7777;
        }

       # Enables Caching
        location ~* \.(ico|css|js)$ {
                 expires 7d;
                add_header Pragma public;
                add_header Cache-Control "public, must-revalidate, proxy-revalidate";
        }
}
}

Maintenant tout est OK

majaxx

Finalement j'arrive jusqu"a la page de connexion mais je n'arrive pas a me logguer et j'ai rien dans les logs ... je retourne sur la page d'accueil
Alors qu'en local sa fonctionne je me log bien !

Machine 1 ( ou le domaine pointe ) :

server {
    listen 80;
    server_name pydio.***.tk;

    location / {
       proxy_pass https://192.168.1.116:3443/;
    }
}

Machine 2 ou il y a pydio ( ou le sous domaine doit pointé) :

server {
        server_name  pydio.***.tk;
        listen 3001;
}
server {
        server_name  pydio.**.tk;
        root /var/www/;
        index index.php;
        listen 3443 ssl;
        keepalive_requests    10;
        keepalive_timeout     60 60;
        access_log /var/log/nginx/access_pydio6_log;
        error_log /var/log/nginx/error_pydio6_log;
        ssl_certificate     /etc/ssl/localcerts/nginx_pydio.pem;
        ssl_certificate_key /etc/ssl/localcerts/nginx_pydio.key;

        client_max_body_size 15M;
        client_body_buffer_size 128k;

        rewrite ^/dashboard|^/settings|^/welcome|^/ws- /index.php last;
        if ( !-e $request_filename ) {
                # WebDAV Rewrites
                rewrite ^/shares /dav.php last;
                # Sync client
                rewrite ^/api /rest.php last;
                # External users
                rewrite ^/user ./index.php?get_action=user_access_point last;
                # Public shares
                rewrite ^/data/public/([a-zA-Z0-9_-]+)\.php$ /data/public/share.php?hash=$1?;
        }
        rewrite ^/data/public/([a-zA-Z0-9_-]+)--([a-z]+)$ /data/public/share.php?hash=$1&lang=$2?;
        rewrite ^/data/public/([a-zA-Z0-9_-]+)$ /data/public/share.php?hash=$1?;

        # Enables PHP
        location ~ \.php$ {
                # for ^/(index|plugins) request_uri should be changed
                set $request_url $request_uri;
                if ( $uri ~ ^/(index|plugins) ) {
                        set $request_url /;
                }
                include fastcgi.conf;
                fastcgi_param  REQUEST_URI $request_url;
                try_files $uri =404;
                fastcgi_pass 127.0.0.1:7777;
        }

       # Enables Caching
        location ~* \.(ico|css|js)$ {
                 expires 7d;
                add_header Pragma public;
                add_header Cache-Control "public, must-revalidate, proxy-revalidate";
        }
                # Public shares
                rewrite ^/data/public/([a-zA-Z0-9_-]+)\.php$ /data/public/share.php?hash=$1?;
        }
        rewrite ^/data/public/([a-zA-Z0-9_-]+)--([a-z]+)$ /data/public/share.php?hash=$1&lang=$2?;
        rewrite ^/data/public/([a-zA-Z0-9_-]+)$ /data/public/share.php?hash=$1?;

        # Enables PHP
        location ~ \.php$ {
                # for ^/(index|plugins) request_uri should be changed
                set $request_url $request_uri;
                if ( $uri ~ ^/(index|plugins) ) {
                        set $request_url /;
                }
                include fastcgi.conf;
                fastcgi_param  REQUEST_URI $request_url;
                try_files $uri =404;
                fastcgi_pass 127.0.0.1:7777;
        }

       # Enables Caching
        location ~* \.(ico|css|js)$ {
                 expires 7d;
                add_header Pragma public;
                add_header Cache-Control "public, must-revalidate, proxy-revalidate";
        }
}

Je viens de verifier access_pydio6_log

192.168.1.102 - - [25/Jan/2016:21:25:34 +0100] "POST /index.php HTTP/1.0" 200 127 "http://***.***.tk/" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/47.0.2526.111 Safari/537.36"
192.168.1.102 - - [25/Jan/2016:21:25:34 +0100] "GET /index.php?&get_action=get_xml_registry&ws_id=0.8649076614528894&secure_token=UllInS9Do2OHgSmC0vwTUTkbtgNx9UMS HTTP/1.0" 200 31259 "http://**.****.tk/" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/47.0.2526.111 Safari/537.36"
192.168.1.102 - - [25/Jan/2016:21:25:34 +0100] "POST /index.php HTTP/1.0" 200 67 "http://****.**.tk/" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/47.0.2526.111 Safari/537.36"
192.168.1.102 - - [25/Jan/2016:21:25:34 +0100] "POST /index.php HTTP/1.0" 200 2 "http://***.**.tk/" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/47.0.2526.111 Safari/537.36"