nginx 服务器显示 403 错误：目录索引 > “/home/deploy/my_app/current/public/” 被禁止

Question

环境：

Digital Ocean Ubuntu 18.04 液滴，安装了 nginx，应用在 Ruby on Rails，使用 capistrano 进行部署。 （它使用一个名为 deploy 的用户）

之前一切正常。 我在 Digital Ocean 上收到消息，然后我在 Digital Ocean Ubuntu 18.04 LTS server 上升级了几个包。 从那时起，该网站已被破坏，我收到403 错误。

使用 $nginx -V，我验证版本已从 1.12.2 升级到 1.18.0

403禁止错误

$sudo tail /var/log/nginx/error.log显示以下错误。

2021/01/11 21:58:55 [错误] 5678#5678: *1目录索引“/home/deploy/my_app/current/public/”被禁止，客户端：999.888.255.141，服务器：*.myserver。 com，请求：“GET / HTTP/2.0”，主机：“hmm.myserver.com”

/etc/nginx/sites-available/默认文件：

server {
        listen 80;
        listen [::]:80;
        server_name *.myserver.com;
        return 301 https://$host$request_uri;
}
server {
        listen 443 ssl http2;
        server_name *.myserver.com;
        passenger_enabled on;
        rails_env    production;
        root         /home/deploy/my_app/current/public;
        ssl_certificate /home/deploy/letsencrypt/fullchain.pem;
        ssl_certificate_key /home/deploy/letsencrypt/privkey.pem;

        # redirect server error pages to the static page /50x.html

}

$ sudo 查看 nginx.conf文件：

user www-data;
worker_processes auto;
pid /run/nginx.pid;

events {
        worker_connections 768;
        # multi_accept on;
}

http {

        ##
        # Basic Settings
        ##

        sendfile on;
        tcp_nopush on;
        tcp_nodelay on;
        keepalive_timeout 65;
        types_hash_max_size 2048;
        # server_tokens off;

        # server_names_hash_bucket_size 64;
        # server_name_in_redirect off;

        include /etc/nginx/mime.types;
        default_type application/octet-stream;
        ##
        # SSL Settings
        ##

        ssl_protocols TLSv1 TLSv1.1 TLSv1.2 TLSv1.3; # Dropping SSLv3, ref: POODLE
        ssl_prefer_server_ciphers on;

        ##
        # Logging Settings
        ##

        access_log /var/log/nginx/access.log;
        error_log /var/log/nginx/error.log;

        ##
        # Gzip Settings
        ##

        gzip on;

        # gzip_vary on;
        # gzip_proxied any;
        # gzip_comp_level 6;
        # gzip_buffers 16 8k;
        # gzip_http_version 1.1;
        # gzip_types text/plain text/css application/json application/javascript text/xml application/xml application/xml+rss text/javascript;

        ##
        # Phusion Passenger config
        ##
        # Uncomment it if you installed passenger or passenger-enterprise
        ##

        # include /etc/nginx/passenger.conf;

        ##
        # Virtual Host Configs
        ##

        include /etc/nginx/conf.d/*.conf;
        include /etc/nginx/sites-enabled/*;
}


#mail {
#       # See sample authentication script at:
#       # http://wiki.nginx.org/ImapAuthenticateWithApachePhpScript
#
#       # auth_http localhost/auth.php;
#       # pop3_capabilities "TOP" "USER";
#       # imap_capabilities "IMAP4rev1" "UIDPLUS";
#
#       server {
#               listen     localhost:110;
#               protocol   pop3;
#               proxy      on;
#       }
#
#       server {
#               listen     localhost:143;
#               protocol   imap;
#               proxy      on;
#       }
#}

$ ruby

/home/deploy/.rbenv/shims/ruby

$ sudopassenger-memory-stats 这显示为：

Version: 6.0.7
Date   : 2021-01-11 23:58:57 +0000
------------- Apache processes -------------
*** WARNING: The Apache executable cannot be found.
Please set the APXS2 environment variable to your 'apxs2' executable's filename, or set the HTTPD environment variable to your 'httpd' or 'apache2' executable's filename.


--------- Nginx processes ----------
PID   PPID  VMSize    Private  Name
------------------------------------
6884  1     175.0 MB  0.7 MB   nginx: master process /usr/sbin/nginx -g daemon on; master_process on;
6885  6884  175.2 MB  0.8 MB   nginx: worker process
### Processes: 2
### Total private dirty RSS: 1.47 MB


--- Passenger processes ---

### Processes: 0
### Total private dirty RSS: 0.00 MB

$ ps辅助| grep nginx显示为：

root      6884  0.0  0.1 179176  5712 ?        Ss   Jan11   0:00 nginx: master process /usr/sbin/nginx -g daemon on; master_process on;
www-data  6885  0.0  0.3 179436 11352 ?        S    Jan11   0:00 nginx: worker process
deploy    8438  0.0  0.0  12940  1012 pts/0    S+   00:24   0:00 grep --color=auto nginx

$ ps辅助| grep 乘客显示为：

deploy    8478  0.0  0.0  12940   936 pts/0    S+   00:29   0:00 grep --color=auto passenger

我已经多次重启了 nginx。 我也尝试过重新安装 Rails 应用程序。

我找到了这个链接。 请参阅“权限被拒绝”部分。 但是在我的服务器上，没有文件/Users/phusion/Sites/rack.test 。 事实上，服务器甚至根本没有 /Users 或 /Users/phusion 文件夹。

我是新手。 非常感谢解决此 403 错误的任何帮助。

Answer 1

几个建议。

您可以检查乘客安装的路径

passenger-config --root

然后与 nginx.conf 中引用的进行比较。

还，

确认您对/home/deploy/my_app/current/public/拥有正确的权限和所有权

Answer 2

问题已解决。

在文件 nginx.conf 中，需要取消注释以下行。

##
# Phusion Passenger config
##
# Uncomment it if you installed passenger or passenger-enterprise
##

包括/etc/nginx/passenger.conf；