Django+uwsgi+nginx+lets加密无法访问https

Question

[已解决]

由/etc/nginx/sites-enabled/default 引起

默认文件已经定义了绑定(bind)流量，所以当我删除它时，它工作正常。

---

我正在使用 Django/uwsgi/nginx。

为了访问 ssl，安装了 Lets encrypt。

下面是nginx和uwsgi的配置文件。

[project_rest.conf]

upstream django {t
    server 127.0.0.1:8001;
}

server {
    listen      8000;
    server_name .mysitedomain.com;
    charset     utf-8;

    client_max_body_size 75M;   # adjust to taste

    # Django media
    location /media  {
        alias /home/app/project_rest/media;  # your Django project's media files - amend as required
    }

    location /static {
        alias /home/app/project_rest/static; # your Django project's static files - amend as required
    }

    # Finally, send all non-media requests to the Django server.
    location / {
       uwsgi_pass  django;
        include     /home/app/project_rest/uwsgi_params; # the uwsgi_params file you installed
    }

    listen 443 ssl; # managed by Certbot
    ssl_certificate /etc/letsencrypt/live/mysitedomain.com/fullchain.pem; # managed by Certbot
    ssl_certificate_key /etc/letsencrypt/live/mysitedomain.com/privkey.pem; # managed by Certbot
    include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
    ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot

}

(我创建了 project_rest.conf 并链接到/etc/nginx/sites-enabled/)

[/etc/nginx/sites-available/default]

server {
        # SSL configuration
        #
        # listen 443 ssl default_server;
        # listen [::]:443 ssl default_server;
        #
        # Note: You should disable gzip for SSL traffic.
        # See: https://bugs.debian.org/773332
        #
        # Read up on ssl_ciphers to ensure a secure configuration.
        # See: https://bugs.debian.org/765782
        #
        # Self signed certs generated by the ssl-cert package
        # Don't use them in a production server!
        #
        # include snippets/snakeoil.conf;

        root /var/www/html;

        # Add index.php to the list if you are using PHP
        index index.html index.htm index.nginx-debian.html;

        server_name mysitedomain.com www.mysitedomain.com;

        location / {
            # First attempt to serve request as file, then
            # as directory, then fall back to displaying a 404.
            try_files $uri $uri/ =404;
        }

        # pass the PHP scripts to FastCGI server listening on 127.0.0.1:9000
        #
        #location ~ \.php$ {
        #   include snippets/fastcgi-php.conf;
        #
        #   # With php7.0-cgi alone:
        #   fastcgi_pass 127.0.0.1:9000;
        #   # With php7.0-fpm:
        #   fastcgi_pass unix:/run/php/php7.0-fpm.sock;
        #}

        # deny access to .htaccess files, if Apache's document root
        # concurs with nginx's one
        #
        #location ~ /\.ht {
        #   deny all;
        #}

    listen [::]:443 ssl ipv6only=on; # managed by Certbot
    listen 443 ssl; # managed by Certbot
    ssl_certificate /etc/letsencrypt/live/mysitedomain.com/fullchain.pem; # managed by Certbot
    ssl_certificate_key /etc/letsencrypt/live/mysitedomain.com/privkey.pem; # managed by Certbot
    include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
    ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot

}

server {
    if ($host = www.mysitedomain.com) {
        return 301 https://$host$request_uri;
    } # managed by Certbot


    if ($host = mysitedomain.com) {
        return 301 https://$host$request_uri;
    } # managed by Certbot


    listen 80 default_server;
    listen [::]:80 default_server;

    server_name mysitedomain.com www.mysitedomain.com;
    return 404; # managed by Certbot
}

[uwsgi.ini]

[uwsgi]
# the base directory (full path)
chdir=/home/app/project_rest
# Django's wsgi file
module=project_rest.wsgi:application
master=true
# maximum number of worker processes
processes=10
# the socket (use the full path to be safe
socket=127.0.0.1:8001
chmod-socket=664
chown-socket=app:app
pidfile=/tmp/project_rest.pid
# clear environment on exit
vacuum=true
max-requests=5000
daemonize=project_rest.uwsgi.log

(我用的是vitualenv)输入“uwsgi --ini uwsgi.ini”后，我可以访问 mysitedomain.com:8000 到我的 django 站点。但我无法访问 https://mysitedomain.com:8000同时可以访问 https://mysitedomain.com我想访问 https://mysitedomain.com:8000 ，如何实现？谢谢。

Answer 1

[已解决]

由/etc/nginx/sites-enabled/default 引起

默认文件已经定义了绑定(bind)流量，所以当我删除它时，

它工作正常。