Skip to content

Digitalocean step by step guide to nginx configuration

Solved Configure
36 2 15.4k 1
  • @justoverclock You can use either, but if the API is not meant to be exposed publicly, and should only be accessed by the app itself, then you should use 127.0.0.1. Ultimately, the design is up to you.

    wrote on last edited by
    #27

    @phenomlab well, i’ve learned something new, no its a private crm developed by me, so no external use 🙂

  • @phenomlab well, i’ve learned something new, no its a private crm developed by me, so no external use 🙂

    wrote on last edited by phenomlab
    #28

    @justoverclock Exactly - that’s why I asked 🙂 You won’t be exposing the API then. Any issues, let me know.

  • @justoverclock Exactly - that’s why I asked 🙂 You won’t be exposing the API then. Any issues, let me know.

    wrote on last edited by
    #29

    @phenomlab ok i’ll try later when people are not using the crm :P, and i’ll post here the result 😄

  • @phenomlab ok i’ll try later when people are not using the crm :P, and i’ll post here the result 😄

    wrote on last edited by
    #30

    @justoverclock No problems.

  • phenomlab phenomlab has marked this topic as solved on
  • phenomlab phenomlab referenced this topic on
  • @justoverclock No problems.

    wrote on last edited by justoverclock
    #31

    @phenomlab its odd but doesn’t work if i use https://vfgest.it:3030 or https://SERVERIP:3030 or https://127.0.0.1:3030

    must be something related to proxy…because server and client are on the same server…but works if i restore all to previous unsecure http connection

  • @phenomlab its odd but doesn’t work if i use https://vfgest.it:3030 or https://SERVERIP:3030 or https://127.0.0.1:3030

    must be something related to proxy…because server and client are on the same server…but works if i restore all to previous unsecure http connection

    wrote on last edited by
    #32

    @justoverclock i’ve found an article that says
    To resolve your issue you can setup nginx to proxy your http backend urls via https. With nginx server you will need to call your api like https://your_domain/api/some_path and nginx will proxy your request to api host, that you will set in config

    so my server actually is on port 3030, what should i do?

    thx!

  • @justoverclock i’ve found an article that says
    To resolve your issue you can setup nginx to proxy your http backend urls via https. With nginx server you will need to call your api like https://your_domain/api/some_path and nginx will proxy your request to api host, that you will set in config

    so my server actually is on port 3030, what should i do?

    thx!

    wrote on last edited by
    #33

    @justoverclock ok i’ve found the solution by myself watching your files…

    -i’ve created a subdomain

    • a new server blocks that proxy requests to the backend endpoint
    • secured with certbot

    all works fine 🍕

  • @justoverclock ok i’ve found the solution by myself watching your files…

    -i’ve created a subdomain

    • a new server blocks that proxy requests to the backend endpoint
    • secured with certbot

    all works fine 🍕

    wrote on last edited by
    #34

    @justoverclock Beat me to it ! I was going to say that you could add another server block to the existing configuration, so for example

    location /api {
                    proxy_set_header X-Real-IP $remote_addr;
                    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
                    proxy_set_header Host $http_host;
                    proxy_set_header X-NginX-Proxy true;
    
                    proxy_pass http://127.0.0.1:3030/;
                    proxy_redirect off;
    
                    # Socket.IO Support
                    proxy_http_version 1.1;
                    proxy_set_header Upgrade $http_upgrade;
                    proxy_set_header Connection "upgrade";
    }
  • @justoverclock Beat me to it ! I was going to say that you could add another server block to the existing configuration, so for example

    location /api {
                    proxy_set_header X-Real-IP $remote_addr;
                    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
                    proxy_set_header Host $http_host;
                    proxy_set_header X-NginX-Proxy true;
    
                    proxy_pass http://127.0.0.1:3030/;
                    proxy_redirect off;
    
                    # Socket.IO Support
                    proxy_http_version 1.1;
                    proxy_set_header Upgrade $http_upgrade;
                    proxy_set_header Connection "upgrade";
    }
    wrote on last edited by
    #35

    @phenomlab 😛 i’m learning ahahahah 🙏

  • @phenomlab 😛 i’m learning ahahahah 🙏

    wrote on last edited by
    #36

    @justoverclock said in Digitalocean step by step guide to nginx configuration:

    i’m learning

    And that’s the whole point of this site 🙂 If you don’t learn anything, you gain nothing.


Did this solution help you?
Did you find the suggested solution useful? Support 💗 Sudonix with a coffee ☕
If your organisation needs deeper expertise around infrastructure, security, or technology leadership, learn more about Phenomlab Ltd. Many of the deeper technical guides behind Sudonix are published there.

Related Topics
  • Optimum config for NodeBB under NGINX

    Performance nginx performance
    4
    3 Votes
    4 Posts
    3k Views
    phenomlab
    @crazycells hi - no security reason, or anything specific in this case. However, the nginx.conf I posted was from my Dev environment which uses this port as a way of not interfering with production. And yes, I use clustering on this site with three instances.
  • Virtualmin Setup DigitalOcean

    Solved Customisation virtualmin digitalocean
    26
    9 Votes
    26 Posts
    13k Views
    phenomlab
    @Hari said in Virtualmin Setup DigitalOcean: i have felt it is very hard to manage Virtualmin the settings are confusing It’s a bit of a learning curve, admittedly, but very powerful and easy to use provided you understand the implications of what you are doing. For example, moving a VirtualMin server to subserver and then back again without changing underlying components that rely on the correct placement of the server, of course it will no longer work.
  • nginx can't start again

    Moved Solved Configure nginx server error
    20
    2 Votes
    20 Posts
    7k Views
    phenomlab
    @elhana-fine Yes that will happen of course if you still choose to restart the NGINX service after making a change and the test fails. The test on it’s own will state the error and the line number allowing you to fix that first
  • nginx seo urls

    Solved Configure
    15
    3 Votes
    15 Posts
    6k Views
    phenomlab
    @riekmedia that looks fine to me
  • Digitalocean Ubuntu configuration

    Solved Linux
    33
    12 Votes
    33 Posts
    15k Views
    justoverclock
    @phenomlab thank you! not me
  • Virtualmin Letsencrypt Renewal

    Solved Hosting
    13
    1 Votes
    13 Posts
    7k Views
    phenomlab
    @gotwf said in Virtualmin Letsencrypt Renewal: I favor KISS engineering Then I think you’ll be able to appreciate this https://content.sudonix.com/keep-it-simple-stupid/
  • is my DMARC configured correctly?

    Solved Configure
    3
    2
    3 Votes
    3 Posts
    2k Views
    Hari
    @phenomlab said in is my DMARC configured correctly?: you’ll get one from every domain that receives email from yours. Today I have received another mail from outlook DMARC, i was referring to your reply again and found it very helpful/informative. thanks again. I wish sudonix 100 more great years ahead!
  • help me configuring cron job for fof/sitemap - flarum

    Solved Configure
    36
    18 Votes
    36 Posts
    13k Views
    DownPW
    you are too fast