ruby-on-rails - Rails、Nginx、Passenger、SSL - 文件上传不工作

Question

我无法上传以使用 Passenger-Nginx 和 SSL。如果我禁用 SSL，上传工作正常。

这是我的 Nginx 站点配置:

server {
    listen 80;
    server_name www.mysite.in;
    root /home/deploy/mysite/current/public;
    passenger_enabled on;
    passenger_ruby /home/deploy/.rvm/gems/ruby-2.1.4/wrappers/ruby;
    passenger_user deploy;
}

server {
    listen 443 ssl;
    server_name www.mysite.in;
    root /home/deploy/mysite/current/public;
    passenger_enabled on;
    passenger_ruby /home/deploy/.rvm/gems/ruby-2.1.4/wrappers/ruby;
    passenger_user deploy;

    ssl on;
    ssl_certificate      /etc/nginx/ssl/www_mysite_in.crt;
    ssl_certificate_key  /etc/nginx/ssl/myserver.key;

    ssl_protocols        TLSv1 TLSv1.1 TLSv1.2;

    #Disables all weak ciphers
    ssl_ciphers 'AES256+EECDH:AES256+EDH';

    # Specifies that server ciphers should be preferred over client (e.g. browser) ciphers when using SSL/TLS.
    ssl_prefer_server_ciphers on;

    ssl_session_cache shared:SSL:10m;

    ssl_stapling on;
    ssl_stapling_verify on;
    resolver 8.8.4.4 8.8.8.8 valid=300s;
    resolver_timeout 10s;

    passenger_set_cgi_param HTTP_X_FORWARDED_PROTO https;
}

任何 config/environments/production.rb

Mysite::Application.configure do
  # Settings specified here will take precedence over those in config/application.rb.

  # Code is not reloaded between requests.
  config.cache_classes = true

  # Eager load code on boot. This eager loads most of Rails and
  # your application in memory, allowing both threaded web servers
  # and those relying on copy on write to perform better.
  # Rake tasks automatically ignore this option for performance.
  config.eager_load = true

  # Full error reports are disabled and caching is turned on.
  config.consider_all_requests_local       = false
  config.action_controller.perform_caching = true

  # Enable Rack::Cache to put a simple HTTP cache in front of your application
  # Add `rack-cache` to your Gemfile before enabling this.
  # For large-scale production use, consider using a caching reverse proxy like nginx, varnish or squid.
  # config.action_dispatch.rack_cache = true

  # Disable Rails's static asset server (Apache or nginx will already do this).
  config.serve_static_assets = false

  # Compress JavaScripts and CSS.
  config.assets.js_compressor = :uglifier
  # config.assets.css_compressor = :sass

  # Do not fallback to assets pipeline if a precompiled asset is missed.
  config.assets.compile = false

  # Generate digests for assets URLs.
  config.assets.digest = true

  # Version of your assets, change this if you want to expire all your assets.
  config.assets.version = '1.0'

  # Specifies the header that your server uses for sending files.
  # config.action_dispatch.x_sendfile_header = "X-Sendfile" # for apache
  config.action_dispatch.x_sendfile_header = 'X-Accel-Redirect' # for nginx

  # Force all access to the app over SSL, use Strict-Transport-Security, and use secure cookies.
  config.force_ssl = true

  # Set to :debug to see everything in the log.
  config.log_level = :info

  # Prepend all log lines with the following tags.
  # config.log_tags = [ :subdomain, :uuid ]

  # Use a different logger for distributed setups.
  # config.logger = ActiveSupport::TaggedLogging.new(SyslogLogger.new)

  # Use a different cache store in production.
  # config.cache_store = :mem_cache_store

  # Enable serving of images, stylesheets, and JavaScripts from an asset server.
  # config.action_controller.asset_host = "http://assets.example.com"

  # Precompile additional assets.
  # application.js, application.css, and all non-JS/CSS in app/assets folder are already added.
  # config.assets.precompile += %w( search.js )

  # Ignore bad email addresses and do not raise email delivery errors.
  # Set this to true and configure the email server for immediate delivery to raise delivery errors.
  # config.action_mailer.raise_delivery_errors = false

  # Enable locale fallbacks for I18n (makes lookups for any locale fall back to
  # the I18n.default_locale when a translation cannot be found).
  config.i18n.fallbacks = true

  # Send deprecation notices to registered listeners.
  config.active_support.deprecation = :notify

  # Disable automatic flushing of the log to improve performance.
  # config.autoflush_log = false

  # Use default logging formatter so that PID and timestamp are not suppressed.
  config.log_formatter = ::Logger::Formatter.new

  # Do not dump schema after migrations.
  config.active_record.dump_schema_after_migration = false

  # config.action_mailer.delivery_method = :sendmail
end

我已经尝试禁用 config.action_dispatch.x_sendfile_header = 'X-Accel-Redirect'，它在 SSL 或非 SSL 下没有区别。

Answer 1

我从来没能让它发挥作用。所以我只是删除了 VPS 镜像，并创建了一个新的...并且它有效。

PS - 我使用安装脚本来安装所有软件包，所以我完全不知道为什么它不能与原始 VPS 图像一起使用。