一、检查服务器权限设置:
1.1 确认ssl证书以及变更权限:
sudo chmod 755 /etc/letsencrypt/live sudo chmod 755 /etc/letsencrypt/live/your_domain
1.2 确认配置文件是否正确:
sudo nano /etc/apache2/sites-available/your_domain.conf sudo nano /etc/nginx/sites-available/your_domain.conf
二、检查Rails应用程序权限设置:
2.1 确认配置文件正确:
sudo nano /etc/nginx/sites-available/your_domain.conf
upstream puma { server unix:///home/user/apps/your_app/shared/sockets/puma.sock; }
server { listen 80; listen [::]:80 default_server; server_name your_domain www.your_domain; # redirect to https return 301 https://$host$request_uri; }
server { listen 443 ssl; listen [::]:443 ssl default_server; server_name your_domain www.your_domain;
ssl_certificate /etc/letsencrypt/live/your_domain/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/your_domain/privkey.pem;
ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
ssl_ciphers HIGH:!aNULL:!MD5;
root /home/user/apps/your_app/current/public;
access_log /home/user/apps/your_app/current/log/nginx.access.log;
error_log /home/user/apps/your_app/current/log/nginx.error.log;
client_max_body_size 4G;
keepalive_timeout 10;
error_page 500 502 503 504 /500.html;
location = /500.html {
root /home/user/apps/your_app/current/public;
}
location / {
try_files $uri/index.html $uri.html $uri @puma;
}
location ^~ /assets/ {
gzip_static on;
expires max;
add_header Cache-Control public;
}
location ^~ /uploads/ {
gzip_static on;
expires max;
add_header Cache-Control public;
}
location @puma {
proxy_set_header X-Forwarded-For $proxy_add_x