Does it say anything about the source of the error? I took it directly from Module ngx_http_core_module 
It does mention "It can only be set once on start.", so maybe it has been used somewhere else.. That might explain the difference between port 80 and port 443 too! Maybe somewhere else ipv6only=off was already set for port 80?
3 Likes
I had found in another config on different domain. Now i removed ipv6only=on from different config and save ipv6only=off in current config as you suggested and save it. Always is good, its saved without an erorrors.
Few minutes, i'll check 80 port
1 Like
For some reason I'm still getting the incorrect HTTPS website/certificate through IPv4 
3 Likes
Only i had found is:
listen 80 default_server;
listen [::]:80 default_server;
in default config...
That's port 80 which is working.. It's indeed also possible to use two listen directives, one for IPv4 and one for IPv6. That way that ipv6only isn't necessary. That's also something you could try for your HTTPS server block on port 443.
4 Likes
Can you share your complete nginx config?:
nginx -T
3 Likes
nginx: [warn] the "ssl" directive is deprecated, use the "listen ... ssl" directive instead in /etc/nginx/sites-enabled/makewear.ua.ssl_conf:42
nginx: [warn] conflicting server name "" on 0.0.0.0:80, ignored
nginx: the configuration file /etc/nginx/nginx.conf syntax is ok
nginx: configuration file /etc/nginx/nginx.conf test is successful
# configuration file /etc/nginx/nginx.conf:
user www-data;
worker_processes auto;
pid /run/nginx.pid;
include /etc/nginx/modules-enabled/*.conf;
events {
worker_connections 768;
# multi_accept on;
}
http {
##
# Basic Settings
##
sendfile on;
tcp_nopush on;
tcp_nodelay on;
keepalive_timeout 65;
types_hash_max_size 2048;
# server_tokens off;
# server_names_hash_bucket_size 64;
# server_name_in_redirect off;
include /etc/nginx/mime.types;
default_type application/octet-stream;
##
# SSL Settings
##
ssl_protocols TLSv1 TLSv1.1 TLSv1.2 TLSv1.3; # Dropping SSLv3, ref: POODLE
ssl_prefer_server_ciphers on;
##
# Logging Settings
##
access_log /var/log/nginx/access.log;
error_log /var/log/nginx/error.log;
##
# Gzip Settings
##
gzip on;
gzip_min_length 256;
gzip_disable "msie6";
# gzip_vary on;
gzip_proxied any;
gzip_comp_level 9;
# gzip_buffers 16 8k;
# gzip_http_version 1.1;
gzip_types text/plain text/css application/json application/javascript text/xml application/xml application/xml+rss text/javascript;
##
# Virtual Host Configs
##
include /etc/nginx/conf.d/*.conf;
include /etc/nginx/sites-enabled/*;
}
#mail {
# # See sample authentication script at:
# # http://wiki.nginx.org/ImapAuthenticateWithApachePhpScript
#
# # auth_http localhost/auth.php;
# # pop3_capabilities "TOP" "USER";
# # imap_capabilities "IMAP4rev1" "UIDPLUS";
#
# server {
# listen localhost:110;
# protocol pop3;
# proxy on;
# }
#
# server {
# listen localhost:143;
# protocol imap;
# proxy on;
# }
#}
# configuration file /etc/nginx/modules-enabled/50-mod-http-image-filter.conf:
load_module modules/ngx_http_image_filter_module.so;
# configuration file /etc/nginx/modules-enabled/50-mod-http-xslt-filter.conf:
load_module modules/ngx_http_xslt_filter_module.so;
# configuration file /etc/nginx/modules-enabled/50-mod-mail.conf:
load_module modules/ngx_mail_module.so;
# configuration file /etc/nginx/modules-enabled/50-mod-stream.conf:
load_module modules/ngx_stream_module.so;
# configuration file /etc/nginx/mime.types:
types {
text/html html htm shtml;
text/css css;
text/xml xml;
image/gif gif;
image/jpeg jpeg jpg;
application/javascript js;
application/atom+xml atom;
application/rss+xml rss;
text/mathml mml;
text/plain txt;
text/vnd.sun.j2me.app-descriptor jad;
text/vnd.wap.wml wml;
text/x-component htc;
image/png png;
image/tiff tif tiff;
image/vnd.wap.wbmp wbmp;
image/x-icon ico;
image/x-jng jng;
image/x-ms-bmp bmp;
image/svg+xml svg svgz;
image/webp webp;
application/font-woff woff;
application/java-archive jar war ear;
application/json json;
application/mac-binhex40 hqx;
application/msword doc;
application/pdf pdf;
application/postscript ps eps ai;
application/rtf rtf;
application/vnd.apple.mpegurl m3u8;
application/vnd.ms-excel xls;
application/vnd.ms-fontobject eot;
application/vnd.ms-powerpoint ppt;
application/vnd.wap.wmlc wmlc;
application/vnd.google-earth.kml+xml kml;
application/vnd.google-earth.kmz kmz;
application/x-7z-compressed 7z;
application/x-cocoa cco;
application/x-java-archive-diff jardiff;
application/x-java-jnlp-file jnlp;
application/x-makeself run;
application/x-perl pl pm;
application/x-pilot prc pdb;
application/x-rar-compressed rar;
application/x-redhat-package-manager rpm;
application/x-sea sea;
application/x-shockwave-flash swf;
application/x-stuffit sit;
application/x-tcl tcl tk;
application/x-x509-ca-cert der pem crt;
application/x-xpinstall xpi;
application/xhtml+xml xhtml;
application/xspf+xml xspf;
application/zip zip;
application/octet-stream bin exe dll;
application/octet-stream deb;
application/octet-stream dmg;
application/octet-stream iso img;
application/octet-stream msi msp msm;
application/vnd.openxmlformats-officedocument.wordprocessingml.document docx;
application/vnd.openxmlformats-officedocument.spreadsheetml.sheet xlsx;
application/vnd.openxmlformats-officedocument.presentationml.presentation pptx;
audio/midi mid midi kar;
audio/mpeg mp3;
audio/ogg ogg;
audio/x-m4a m4a;
audio/x-realaudio ra;
video/3gpp 3gpp 3gp;
video/mp2t ts;
video/mp4 mp4;
video/mpeg mpeg mpg;
video/quicktime mov;
video/webm webm;
video/x-flv flv;
video/x-m4v m4v;
video/x-mng mng;
video/x-ms-asf asx asf;
video/x-ms-wmv wmv;
video/x-msvideo avi;
}
# configuration file /etc/nginx/sites-enabled/alexgrow:
server {
server_name alexgrow.biz www.alexgrow.biz;
root /var/www/alexgrow;
index index.php index.html;
access_log /var/log/nginx/alexgrow-access.log;
error_log /var/log/nginx/alexgrow-error.log;
location ~ /\.ht {
deny all;
}
location ~ \.php$ {
fastcgi_pass unix:/run/php/php7.1-fpm.sock;
include snippets/fastcgi-php.conf;
fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
}
location ~* \.(js|css|png|jpg|jpeg|gif|svg|ico|woff|woff2|ttf)$ {
expires max;
add_header Cache-Control "public, no-transform";
}
listen [::]:443 ssl; # managed by Certbot
ssl_certificate /etc/letsencrypt/live/www.alexgrow.biz/fullchain.pem; # managed by Certbot
ssl_certificate_key /etc/letsencrypt/live/www.alexgrow.biz/privkey.pem; # managed by Certbot
include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
}server {
if ($host = alexgrow.biz) {
return 301 https://$host$request_uri;
} # managed by Certbot
if ($host = www.alexgrow.biz) {
return 301 https://$host$request_uri;
} # managed by Certbot
listen [::]:80;
server_name alexgrow.biz www.alexgrow.biz;
return 404; # managed by Certbot
}
# configuration file /etc/nginx/snippets/fastcgi-php.conf:
# regex to split $uri to $fastcgi_script_name and $fastcgi_path
fastcgi_split_path_info ^(.+?\.php)(/.*)$;
# Check that the PHP script exists before passing it
try_files $fastcgi_script_name =404;
# Bypass the fact that try_files resets $fastcgi_path_info
# see: http://trac.nginx.org/nginx/ticket/321
set $path_info $fastcgi_path_info;
fastcgi_param PATH_INFO $path_info;
fastcgi_index index.php;
include fastcgi.conf;
# configuration file /etc/nginx/fastcgi.conf:
fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
fastcgi_param QUERY_STRING $query_string;
fastcgi_param REQUEST_METHOD $request_method;
fastcgi_param CONTENT_TYPE $content_type;
fastcgi_param CONTENT_LENGTH $content_length;
fastcgi_param SCRIPT_NAME $fastcgi_script_name;
fastcgi_param REQUEST_URI $request_uri;
fastcgi_param DOCUMENT_URI $document_uri;
fastcgi_param DOCUMENT_ROOT $document_root;
fastcgi_param SERVER_PROTOCOL $server_protocol;
fastcgi_param REQUEST_SCHEME $scheme;
fastcgi_param HTTPS $https if_not_empty;
fastcgi_param GATEWAY_INTERFACE CGI/1.1;
fastcgi_param SERVER_SOFTWARE nginx/$nginx_version;
fastcgi_param REMOTE_ADDR $remote_addr;
fastcgi_param REMOTE_PORT $remote_port;
fastcgi_param SERVER_ADDR $server_addr;
fastcgi_param SERVER_PORT $server_port;
fastcgi_param SERVER_NAME $server_name;
# PHP only, required if PHP was built with --enable-force-cgi-redirect
fastcgi_param REDIRECT_STATUS 200;
# configuration file /etc/letsencrypt/options-ssl-nginx.conf:
# This file contains important security parameters. If you modify this file
# manually, Certbot will be unable to automatically provide future security
# updates. Instead, Certbot will print and log an error message with a path to
# the up-to-date file that you will need to refer to when manually updating
# this file.
ssl_session_cache shared:le_nginx_SSL:10m;
ssl_session_timeout 1440m;
ssl_session_tickets off;
ssl_protocols TLSv1.2 TLSv1.3;
ssl_prefer_server_ciphers off;
ssl_ciphers "ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDH E-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384";
# configuration file /etc/nginx/sites-enabled/makewear.com.ua:
server {
listen 80;
return 301 https://$host$request_uri;
}
server {
server_name makewear.com.ua www.makewear.com.ua;
listen 443 ssl http2;
return 301 https://makewear.ua$request_uri;
ssl_certificate /etc/letsencrypt/live/makewear.com.ua-0001/fullchain.pem; # managed by Certbot
ssl_certificate_key /etc/letsencrypt/live/makewear.com.ua-0001/privkey.pem;
# managed by Certbot
#location ~ \.php$ {
# include fastcgi_params;
# fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
# fastcgi_pass unix:/run/php/php7.4-fpm.sock;
# fastcgi_split_path_info ^(.+\.php)(/.+)$;
# fastcgi_index index.php;
# try_files $uri =404;
# }
}
# configuration file /etc/nginx/sites-enabled/makewear.ru:
server {
listen 80;
return 301 https://$host$request_uri;
}
server {
server_name makewear.ru www.makewear.ru;
listen 443 ssl http2;
return 301 https://makewear.ua$request_uri;
ssl_certificate /etc/letsencrypt/live/makewear.ru/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/makewear.ru/privkey.pem;
}
# configuration file /etc/nginx/sites-enabled/makewear.ua.ssl_conf:
server {
server_name makewear.ua www.makewear.ua;
listen 443 ssl;
access_log /var/log/nginx/makewear-access.log;
error_log /var/log/nginx/makewear-error.log;
root /var/www/makewear/public;
index index.php index.html index.htm index.nginx-debian.html aha.php;
proxy_connect_timeout 3600;
proxy_send_timeout 3600;
proxy_read_timeout 36000;
send_timeout 3600;
proxy_set_header Host $host;
fastcgi_send_timeout 300;
fastcgi_read_timeout 300;
location ~* ^.+\.(ogg|ogv|svg|svgz|eot|otf|woff|mp4|ttf|rss|atom|jpg|jpeg|gif|png|ico|zip|tgz|gz|rar|bz2|doc|xls|exe|css|js|ppt|tar|mid|midi|wav|bmp|rtf)$ {
expires max;
}
location / {
index index.html index.htm index.php;
try_files $uri $uri/ /index.php?$args;
}
location ~ \.php$ {
fastcgi_pass unix:/run/php/php7.4-fpm.sock;
include snippets/fastcgi-php.conf;
fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
}
# location ~ \.php$ {
# include snippets/fastcgi-php.conf;
# fastcgi_pass unix:/var/run/php/php7.1-fpm.sock;
# }
ssl on;
ssl_certificate /etc/letsencrypt/live/makewear.ua/fullchain.pem; # managed by Certbot
ssl_certificate_key /etc/letsencrypt/live/makewear.ua/privkey.pem; # managed by Certbot
ssl_protocols TLSv1.2 TLSv1.3;
ssl_ciphers 'kEECDH+ECDSA+AES128 kEECDH+ECDSA+AES256 kEECDH+AES128 kEECDH+AES256 kEDH+AES128 kEDH+AES256 DES-CBC3-SHA +SHA !aNULL !eNULL !LOW !kECDH !DSS !MD5 !RC4 !EXP !PSK !SRP !CAMELLIA !SEED';
add_header Strict-Transport-Security "max-age=63072000; includeSubdomains; preload";
add_header X-Frame-Options "DENY";
# if ($http_x_requested_with != XMLHttpRequest) {
# rewrite ^([^.\?]*[^/])$ $1/ permanent;
# }
# merge_slashes off;
# location ~* .*//+.* {
# rewrite (.*)//+(.*) $1/$2 permanent;
# }
}
server {
if ($host = makewear.ua) {
return 301 https://$host$request_uri;
} # managed by Certbot
# listen 161.35.26.205:80;
listen 80;
server_name makewear.ua;
return 404; # managed by Certbot
}
# configuration file /etc/nginx/sites-enabled/makewear_develop:
server {
server_name makewear-dev.pp.ua;
client_max_body_size 32m;
root /var/www/makewear_develop/public;
index index.php index.html;
access_log /var/log/nginx/makewear-dev-access.log;
error_log /var/log/nginx/makewear-dev-error.log;
location / {
try_files $uri $uri/ /index.php?$args;
}
location ~ \.php$ {
include fastcgi_params;
fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
fastcgi_pass unix:/run/php/php7.4-fpm.sock;
fastcgi_split_path_info ^(.+\.php)(/.+)$;
fastcgi_index index.php;
try_files $uri =404;
}
listen [::]:443 ssl; # managed by Certbot
listen 443 ssl; # managed by Certbot
ssl_certificate /etc/letsencrypt/live/makewear-dev.pp.ua/fullchain.pem; # managed by Certbot
ssl_certificate_key /etc/letsencrypt/live/makewear-dev.pp.ua/privkey.pem; # managed by Certbot
include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
}server {
if ($host = makewear-dev.pp.ua) {
return 301 https://$host$request_uri;
} # managed by Certbot
listen 80;
listen [::]:80;
server_name makewear-dev.pp.ua;
return 404; # managed by Certbot
}
# configuration file /etc/nginx/fastcgi_params:
fastcgi_param QUERY_STRING $query_string;
fastcgi_param REQUEST_METHOD $request_method;
fastcgi_param CONTENT_TYPE $content_type;
fastcgi_param CONTENT_LENGTH $content_length;
fastcgi_param SCRIPT_NAME $fastcgi_script_name;
fastcgi_param REQUEST_URI $request_uri;
fastcgi_param DOCUMENT_URI $document_uri;
fastcgi_param DOCUMENT_ROOT $document_root;
fastcgi_param SERVER_PROTOCOL $server_protocol;
fastcgi_param REQUEST_SCHEME $scheme;
fastcgi_param HTTPS $https if_not_empty;
fastcgi_param GATEWAY_INTERFACE CGI/1.1;
fastcgi_param SERVER_SOFTWARE nginx/$nginx_version;
fastcgi_param REMOTE_ADDR $remote_addr;
fastcgi_param REMOTE_PORT $remote_port;
fastcgi_param SERVER_ADDR $server_addr;
fastcgi_param SERVER_PORT $server_port;
fastcgi_param SERVER_NAME $server_name;
# PHP only, required if PHP was built with --enable-force-cgi-redirect
fastcgi_param REDIRECT_STATUS 200;
# configuration file /etc/nginx/sites-enabled/obana:
server {
server_name obana.com.ua www.obana.com.ua;
root /var/www/obana;
index index.php index.html;
access_log /var/log/nginx/obana-access.log;
error_log /var/log/nginx/obana-error.log;
location / {
disable_symlinks off;
try_files $uri $uri/ /index.php?$query_string;
}
location ~ \.php$ {
fastcgi_pass unix:/run/php/php7.1-fpm.sock;
include snippets/fastcgi-php.conf;
fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
}
location ~ /\.ht {
deny all;
}
location ~* \.(js|css|png|jpg|jpeg|gif|svg|ico|woff|woff2|ttf)$ {
expires max;
add_header Cache-Control "public, no-transform";
}
listen 443 ssl; # managed by Certbot
ssl_certificate /etc/letsencrypt/live/obana.com.ua/fullchain.pem; # managed by Certbot
ssl_certificate_key /etc/letsencrypt/live/obana.com.ua/privkey.pem; # managed by Certbot
include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
}server {
if ($host = www.obana.com.ua) {
return 301 https://$host$request_uri;
} # managed by Certbot
if ($host = obana.com.ua) {
return 301 https://$host$request_uri;
} # managed by Certbot
server_name obana.com.ua www.obana.com.ua;
listen 80;
return 404; # managed by Certbot
}
# configuration file /etc/nginx/sites-enabled/pma:
server {
listen 8080;
root /var/www/pma;
index index.php;
location / {
try_files $uri $uri/ /index.php?q=$uri&$args;
}
location ~ \.php$ {
include fastcgi_params;
fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
fastcgi_pass unix:/run/php/php7.4-fpm.sock;
fastcgi_split_path_info ^(.+\.php)(/.+)$;
fastcgi_index index.php;
try_files $uri =404;
}
}
I solved it!
I had do two things:
- Replace listen [::]:443 ssl; with listen 443 ssl;
- Replace listen listen [::]:80; with listen listen 80;
But... i still have problem with port settings... i dought
In several places in the config I see:
}server {
which should be:
}
server {
Not a real problem, but I would correct that.
2 Likes
These sections have no server_name:
# configuration file /etc/nginx/sites-enabled/makewear.com.ua:
server {
listen 80;
return 301 https://$host$request_uri;
}
# configuration file /etc/nginx/sites-enabled/makewear.ru:
server {
listen 80;
return 301 https://$host$request_uri;
}
2 Likes
Thank you a lot!!!
I would not done anything without you and Osiris!
You save me 
And thank you for your suggests! I'll do it!
2 Likes
This file has inconsistent server_name:
# configuration file /etc/nginx/sites-enabled/makewear.ua.ssl_conf:
server_name makewear.ua www.makewear.ua;
listen 443 ssl;
listen 80;
server_name makewear.ua;
[HTTP is missing "www"]
3 Likes
This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.