Nginx 子域服务器块不断重定向到 Centos 中的主域 7

Question

我有一个 WordPress 站点并尝试使用 Nginx 和 Let's Encrypt SSL 设置子域以拥有生产和测试环境。

例如：

• 产品网站 --> abc.com www.abc.com
• 开发站点 --> dev.abc.com

我已经使用本指南https://www.digitalocean.com/community/tutorials/how-to-set-up-nginx-server-blocks-on-centos-7设置了 Nginx 。

我的服务器块如下所示： /site-available/abc.com.conf

 server {
        root /var/www/wordpress;
        index index.php index.html index.htm;
        server_name abc.com www.abc.com;
        client_max_body_size 100M;

        location / {
                #try_files $uri $uri/ =404;
                try_files $uri $uri/ /index.php$is_args$args;
        }

        location ~ \.php$ {
                fastcgi_pass unix:/run/php-fpm/php-fpm.sock;
                fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
                include fastcgi_params;
                fastcgi_index index.php;
                fastcgi_connect_timeout 300s;
                fastcgi_read_timeout 300s;
                fastcgi_send_timeout 300s;
        }

        location ~ /\.ht {
                deny all;
        }

    listen 443 ssl http2;
    ssl_protocols TLSv1.2 TLSv1.3;
    ssl_prefer_server_ciphers on;
    ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem;
    ssl_ciphers "ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA384";

    # Improve HTTPS performance with session resumption
    ssl_session_cache shared:SSL:30m;
    ssl_session_timeout 15m;
    ssl_session_tickets on;
    add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always;
    ssl_stapling on;
    ssl_stapling_verify on;
    ssl_trusted_certificate /etc/letsencrypt/live/abc.com/fullchain.pem;
    resolver 1.1.1.1 1.0.0.1 [2606:4700:4700::1111] [2606:4700:4700::1001] valid=300s; # Cloudflare
    resolver_timeout 5s;

    ssl_certificate /etc/letsencrypt/live/abc.com/fullchain.pem; # managed by Certbot
    ssl_certificate_key /etc/letsencrypt/live/abc.com/privkey.pem; # managed by Certbot

}
server {
    if ($host = www.abc.com) {
        return 301 https://$host$request_uri;
    } # managed by Certbot


    if ($host = abc.com) {
        return 301 https://$host$request_uri;
    } # managed by Certbot

        listen 80;
        server_name abc.com www.abc.com;
    return 404; # managed by Certbot
}

/site-available/dev.abc.com.conf

server {
        root /var/www/dev.abc.com;
        index index.php index.html index.htm index.nginx-debian.html;
        server_name dev.abc.com;

        location / {
                #try_files $uri $uri/ =404;
                try_files $uri $uri/ /index.php$is_args$args;
        }

        location ~ \.php$ {
                fastcgi_pass unix:/run/php-fpm/php-fpm.sock;
                fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
                include fastcgi_params;
                fastcgi_index index.php;
                fastcgi_connect_timeout 300s;
                fastcgi_read_timeout 300s;
                fastcgi_send_timeout 300s;
        }

        location ~ /\.ht {
                deny all;
        }

    listen 443 ssl http2;
    ssl_protocols TLSv1.2 TLSv1.3;
    ssl_prefer_server_ciphers on;
    ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem;
    ssl_ciphers "ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA384";
 
    # Improve HTTPS performance with session resumption
    ssl_session_cache shared:SSL:30m;
    ssl_session_timeout 15m;
    ssl_session_tickets on;
    add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always;
    ssl_stapling on;
    ssl_stapling_verify on;
    ssl_trusted_certificate /etc/letsencrypt/live/dev.abc.com/fullchain.pem;
    resolver 1.1.1.1 1.0.0.1 [2606:4700:4700::1111] [2606:4700:4700::1001] valid=300s; # Cloudflare
    resolver_timeout 5s;

    ssl_certificate /etc/letsencrypt/live/dev.abc.com/fullchain.pem; # managed by Certbot
    ssl_certificate_key /etc/letsencrypt/live/dev.abc.com/privkey.pem; # managed by Certbot

}

我已成功在 Cloudflare 和 Digital Ocean 上为 dev 域名启用 A 记录。 问题是，每当我尝试访问dev.abc.com时，无论如何它都会重定向到abc.com 。 然后我尝试删除abc.com.conf服务器块并进行测试，然后它与dev.abc.com.conf一起工作正常； 但是，当我尝试将两个块放在一起时，这一次它只适用于dev.abc.com 。

我不确定我在这个 Nginx 配置中缺少什么。 我也有两个 SSL 证书来匹配确切的域。 我在 Ubuntu 服务器上有准确的 Nginx 配置，并且在我的另一个站点上工作正常。