Certbot renewal issue
$sudo nginx -T
nginx: the configuration file /etc/nginx/nginx.conf syntax is ok
nginx: configuration file /etc/nginx/nginx.conf test is successful
configuration file /etc/nginx/nginx.conf:
user www-data;
worker_processes auto;
pid /run/nginx.pid;
include /etc/nginx/modules-enabled/*.conf;
events {
worker_connections 1024;
# multi_accept on;
}
http {
## # Basic Settings ## #client_max_body_size 1024M; sendfile on; tcp_nopush on; tcp_nodelay on; keepalive_timeout 650000s; types_hash_max_size 2048; client_body_timeout 12; client_header_timeout 12; client_body_buffer_size 10k; client_header_buffer_size 1k; client_max_body_size 8m; large_client_header_buffers 4 8k; #optimize session tickets #ssl_session_cache shared:SSL:50m; ssl_session_timeout 1d; #Enable session tickets ssl_session_tickets on; add_header X-Cache-Status $upstream_cache_Status; # server_tokens off; # server_names_hash_bucket_size 64; # server_name_in_redirect off; include /etc/nginx/mime.types; default_type application/octet-stream; ## # SSL Settings ## #ssl on; ssl_session_cache builtin:1000 shared:SSL:10m; ssl_protocols TLSv1 TLSv1.1 TLSv1.2; # Dropping SSLv3, ref: POODLE ssl_ciphers HIGH:!aNULL:!eNULL:!EXPORT:!CAMELLIA:!DES:!MDS:!PSK:!RC4; ssl_prefer_server_ciphers on; ## # Logging Settings ## access_log /var/log/nginx/access.log; error_log /var/log/nginx/error.log; ## # Gzip Settings ## gzip on; gzip_vary on; gzip_proxied any; gzip_comp_level 6; gzip_buffers 16 8k; gzip_http_version 1.1; gzip_types text/plain text/css application/json application/javascript text/xml application/xml application/xml+rss text/javascript; ## # Virtual Host Configs ## include /etc/nginx/conf.d/*.conf; include /etc/nginx/sites-enabled/*;
}
#mail {
# See sample authentication script at:# GitHub - nginxinc/nginx-wiki: ARCHIVED -- Source for the now archived NGINX Wiki section of https://www.nginx.com# auth_http localhost/auth.php;# pop3_capabilities "TOP" "USER";# imap_capabilities "IMAP4rev1" "UIDPLUS";server {listen localhost:110;protocol pop3;proxy on;}server {listen localhost:143;protocol imap;proxy on;}
#}
configuration file /etc/nginx/modules-enabled/50-mod-http-geoip.conf:
load_module modules/ngx_http_geoip_module.so;
configuration file /etc/nginx/modules-enabled/50-mod-http-image-filter.conf:
load_module modules/ngx_http_image_filter_module.so;
configuration file /etc/nginx/modules-enabled/50-mod-http-xslt-filter.conf:
load_module modules/ngx_http_xslt_filter_module.so;
configuration file /etc/nginx/modules-enabled/50-mod-mail.conf:
load_module modules/ngx_mail_module.so;
configuration file /etc/nginx/modules-enabled/50-mod-stream.conf:
load_module modules/ngx_stream_module.so;
configuration file /etc/nginx/mime.types:
types {
text/html html htm shtml;
text/css css;
text/xml xml;
image/gif gif;
image/jpeg jpeg jpg;
application/javascript js;
application/atom+xml atom;
application/rss+xml rss;
text/mathml mml; text/plain txt; text/vnd.sun.j2me.app-descriptor jad; text/vnd.wap.wml wml; text/x-component htc; image/png png; image/tiff tif tiff; image/vnd.wap.wbmp wbmp; image/x-icon ico; image/x-jng jng; image/x-ms-bmp bmp; image/svg+xml svg svgz; image/webp webp; application/font-woff woff; application/java-archive jar war ear; application/json json; application/mac-binhex40 hqx; application/msword doc; application/pdf pdf; application/postscript ps eps ai; application/rtf rtf; application/vnd.apple.mpegurl m3u8; application/vnd.ms-excel xls; application/vnd.ms-fontobject eot; application/vnd.ms-powerpoint ppt; application/vnd.wap.wmlc wmlc; application/vnd.google-earth.kml+xml kml; application/vnd.google-earth.kmz kmz; application/x-7z-compressed 7z; application/x-cocoa cco; application/x-java-archive-diff jardiff; application/x-java-jnlp-file jnlp; application/x-makeself run; application/x-perl pl pm; application/x-pilot prc pdb; application/x-rar-compressed rar; application/x-redhat-package-manager rpm; application/x-sea sea; application/x-shockwave-flash swf; application/x-stuffit sit; application/x-tcl tcl tk; application/x-x509-ca-cert der pem crt; application/x-xpinstall xpi; application/xhtml+xml xhtml; application/xspf+xml xspf; application/zip zip; application/octet-stream bin exe dll; application/octet-stream deb; application/octet-stream dmg; application/octet-stream iso img; application/octet-stream msi msp msm; application/vnd.openxmlformats-officedocument.wordprocessingml.document docx; application/vnd.openxmlformats-officedocument.spreadsheetml.sheet xlsx; application/vnd.openxmlformats-officedocument.presentationml.presentation pptx; audio/midi mid midi kar; audio/mpeg mp3; audio/ogg ogg; audio/x-m4a m4a; audio/x-realaudio ra; video/3gpp 3gpp 3gp; video/mp2t ts; video/mp4 mp4; video/mpeg mpeg mpg; video/quicktime mov; video/webm webm; video/x-flv flv; video/x-m4v m4v; video/x-mng mng; video/x-ms-asf asx asf; video/x-ms-wmv wmv; video/x-msvideo avi;
}
configuration file /etc/nginx/sites-enabled/default:You should look at the following URL's in order to grasp a solid understandingof Nginx configuration files in order to fully unleash the power of Nginx.NGINX DocumentationNGINX DocumentationNginx/DirectoryStructure - Debian WikiIn most cases, administrators will remove this file from sites-enabled/ andleave it as reference inside of sites-available where it will continue to beupdated by the nginx packaging team.This file will automatically load configuration files provided by otherapplications, such as Drupal or Wordpress. These applications will be madeavailable underneath a path with that package name, such as /drupal8.Please see /usr/share/doc/nginx-doc/examples/ for more detailed examples.Default server configuration
#server {
listen 443 ssl;ssl on;ssl_certificate /etc/nginx/ssl/mobps.de.chained.crt;ssl_certificate_key /etc/nginx/ssl/perm_with_key.pem;root /var/www/html;server_name mobps.de www.mobps.de;location / {try_files $uri $uri/ = 404;}
#}
#Redirect HTTP to HTTPS
server {
listen 80 default_server;
server_name _;
return 301 https://$host$request_uri;
}
upstream mobps.de
{
server 127.0.0.1:8080;
}
server {
listen 443 ssl;
server_name mobps.de; #ssl_certificate /etc/nginx/ssl/mobps.de.chained.crt; #ssl_certificate_key /etc/nginx/ssl/pem_with_key.key; #ssl_certificate /etc/letsencrypt/live/mobps.de/fullchain.pem; #ssl_certificate_key /etc/letsencrypt/live/mobps.de/privkey.pem; ssl_certificate /etc/letsencrypt/live/MoBPSCert/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/MoBPSCert/privkey.pem; root /var/www/html; index index.html index.htm index.nginx-debian.html; server_name _; location / { # First attempt to serve request as file, then # as directory, then fall back to displaying a 404. #try_files $uri $uri/ =404; proxy_pass http://localhost:8080; proxy_http_version 1.1; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection 'upgrade'; proxy_set_header Host $host; proxy_cache_bypass $http_upgrade; proxy_connect_timeout 3600; proxy_send_timeout 3600; proxy_read_timeout 3600; send_timeout 36000s; # proxy_redirect http://locahost:8080 https://mobps.de; #proxy_hide_header X-Frame-Options;
#add_header X-XSS-Protection "1; mode=block";
#add_header X-Content-Type-Options nosniff;
#add_header Strict-Transport-Security "max-age=31536000; includeSubDomains";
}
}
