Only #2 will use the defaults.
#1 will use whatever is in the included file.
FILE <> DEFAULTS
restart web service
Reloaded nginx configuration. Still timeout issue.
I do see what you see …
Please show their public cert files:
/etc/letsencrypt/live/abhaysrivastav.net-0002/fullchain.pem
/etc/letsencrypt/live/youtubecut.com-0001/fullchain.pem
[although they are both from LE, there may be something different in there]
Wait a minute.
You made multiple changes.
The included file was remmed out but the three lines were also removed.
Now there is no CIPHER setting at all.
First there were too many now none.
If this is a TEST … we BOTH FAIL.
Because i commented that line, automatically content from /etc/letsencrypt/options-ssl-nginx.conf are not included in the full configuration.
OK NOW THIS IS STARTING TO MAKE SENSE!
Please include that line in both sections.
I think you may NOT have correctly restarted NGINX.
This is once again NOT making any sense at all…
Can you just reboot the system?
Ok. Tell me why https://abhaysrivastav.net is working but https://youtubecut.com is not ? Why should i reboot the system ?
Because:
Even though you have TOLD the system to do the same for both - it is NOT doing what you asked it.
WHY?
I do not know.
Lack of memory...
Lack of resources...
Driver issues...
Cache issues...
Again I don't know.
Yes, nginx configuration changes are being reflected, if you are worried about that.
I am worried about it isn’t doing what you ask it to do.
Try stopping nginx and then starting it.
I have stopped the nginx and again restarted. But still same issue.
Try swap the certificates around, without doing anything else. (Swap ssl_certificate and ssl_certificate_key between the two virtual hosts).
Isolate whether it’s related to the the configuration of the virtualhost, or whether it’s actually a problem with the certificate.
This will cause SSL warnings in the browser, but at least it might help narrow the problem down.
Which file would be called the public key ? I want to send it so that you can check.
OK please show the output of nginx -T
But this time ensure you put a line above and below as follows:
```
OUTPUT
```
I showed you the files (fullchain):
Output of nginx -T
nginx: the configuration file /etc/nginx/nginx.conf syntax is ok
nginx: configuration file /etc/nginx/nginx.conf test is successful
# configuration file /etc/nginx/nginx.conf:
user www-data;
worker_processes auto;
pid /run/nginx.pid;
include /etc/nginx/modules-enabled/*.conf;
events {
worker_connections 768;
# multi_accept on;
}
http {
##
# Basic Settings
##
sendfile on;
tcp_nopush on;
tcp_nodelay on;
keepalive_timeout 65;
types_hash_max_size 2048;
# server_tokens off;
# server_names_hash_bucket_size 64;
# server_name_in_redirect off;
include /etc/nginx/mime.types;
default_type application/octet-stream;
##
# SSL Settings
##
ssl_protocols TLSv1.2 TLSv1.3;
ssl_prefer_server_ciphers on;
##
# Logging Settings
##
access_log /var/log/nginx/access.log;
error_log /var/log/nginx/error.log;
##
# Gzip Settings
##
gzip on;
# gzip_vary on;
# gzip_proxied any;
# gzip_comp_level 6;
# gzip_buffers 16 8k;
# gzip_http_version 1.1;
# gzip_types text/plain text/css application/json application/javascript text/xml application/xml application/xml+rss text/javascript;
##
# Virtual Host Configs
##
include /etc/nginx/conf.d/*.conf;
# include /etc/nginx/sites-enabled/*;
}
#mail {
# # See sample authentication script at:
# # http://wiki.nginx.org/ImapAuthenticateWithApachePhpScript
#
# # auth_http localhost/auth.php;
# # pop3_capabilities "TOP" "USER";
# # imap_capabilities "IMAP4rev1" "UIDPLUS";
#
# server {
# listen localhost:110;
# protocol pop3;
# proxy on;
# }
#
# server {
# listen localhost:143;
# protocol imap;
# proxy on;
# }
#}
# configuration file /etc/nginx/modules-enabled/50-mod-http-geoip.conf:
load_module modules/ngx_http_geoip_module.so;
# configuration file /etc/nginx/modules-enabled/50-mod-http-image-filter.conf:
load_module modules/ngx_http_image_filter_module.so;
# configuration file /etc/nginx/modules-enabled/50-mod-http-xslt-filter.conf:
load_module modules/ngx_http_xslt_filter_module.so;
# configuration file /etc/nginx/modules-enabled/50-mod-mail.conf:
load_module modules/ngx_mail_module.so;
# configuration file /etc/nginx/modules-enabled/50-mod-stream.conf:
load_module modules/ngx_stream_module.so;
# configuration file /etc/nginx/mime.types:
types {
text/html html htm shtml;
text/css css;
text/xml xml;
image/gif gif;
image/jpeg jpeg jpg;
application/javascript js;
application/atom+xml atom;
application/rss+xml rss;
text/mathml mml;
text/plain txt;
text/vnd.sun.j2me.app-descriptor jad;
text/vnd.wap.wml wml;
text/x-component htc;
image/png png;
image/tiff tif tiff;
image/vnd.wap.wbmp wbmp;
image/x-icon ico;
image/x-jng jng;
image/x-ms-bmp bmp;
image/svg+xml svg svgz;
image/webp webp;
application/font-woff woff;
application/java-archive jar war ear;
application/json json;
application/mac-binhex40 hqx;
application/msword doc;
application/pdf pdf;
application/postscript ps eps ai;
application/rtf rtf;
application/vnd.apple.mpegurl m3u8;
application/vnd.ms-excel xls;
application/vnd.ms-fontobject eot;
application/vnd.ms-powerpoint ppt;
application/vnd.wap.wmlc wmlc;
application/vnd.google-earth.kml+xml kml;
application/vnd.google-earth.kmz kmz;
application/x-7z-compressed 7z;
application/x-cocoa cco;
application/x-java-archive-diff jardiff;
application/x-java-jnlp-file jnlp;
application/x-makeself run;
application/x-perl pl pm;
application/x-pilot prc pdb;
application/x-rar-compressed rar;
application/x-redhat-package-manager rpm;
application/x-sea sea;
application/x-shockwave-flash swf;
application/x-stuffit sit;
application/x-tcl tcl tk;
application/x-x509-ca-cert der pem crt;
application/x-xpinstall xpi;
application/xhtml+xml xhtml;
application/xspf+xml xspf;
application/zip zip;
application/octet-stream bin exe dll;
application/octet-stream deb;
application/octet-stream dmg;
application/octet-stream iso img;
application/octet-stream msi msp msm;
application/vnd.openxmlformats-officedocument.wordprocessingml.document docx;
application/vnd.openxmlformats-officedocument.spreadsheetml.sheet xlsx;
application/vnd.openxmlformats-officedocument.presentationml.presentation pptx;
audio/midi mid midi kar;
audio/mpeg mp3;
audio/ogg ogg;
audio/x-m4a m4a;
audio/x-realaudio ra;
video/3gpp 3gpp 3gp;
video/mp2t ts;
video/mp4 mp4;
video/mpeg mpeg mpg;
video/quicktime mov;
video/webm webm;
video/x-flv flv;
video/x-m4v m4v;
video/x-mng mng;
video/x-ms-asf asx asf;
video/x-ms-wmv wmv;
video/x-msvideo avi;
}
# configuration file /etc/nginx/conf.d/server.conf:
server {
server_name abhaysrivastav.net www.abhaysrivastav.net;
root /home/ubuntu/Website/;
index index.html;
access_log /var/log/nginx/access_log combined;
location / {
try_files $uri $uri/ =404;
}
listen 443 ssl; # managed by Certbot
ssl_certificate /etc/letsencrypt/live/abhaysrivastav.net-0002/fullchain.pem; # managed by Certbot
ssl_certificate_key /etc/letsencrypt/live/abhaysrivastav.net-0002/privkey.pem; # managed by Certbot
}
server {
server_name youtubecut.com www.youtubecut.com;
root /home/ubuntu/youtubecut-frontend/dist/;
index index.html;
location / {
try_files $uri $uri/ =404;
}
location /api/ {
proxy_pass http://127.0.0.1:8082/;
proxy_read_timeout 300s;
}
listen 443 ssl; # managed by Certbot
ssl_certificate /etc/letsencrypt/live/youtubecut.com-0001/fullchain.pem; # managed by Certbot
ssl_certificate_key /etc/letsencrypt/live/youtubecut.com-0001/privkey.pem; # managed by Certbot
# include /etc/letsencrypt/options-ssl-nginx.conf;
}
server {
listen 80;
server_name abhaysrivastav.net www.abhaysrivastav.net;
root /home/ubuntu/Website/;
index index.html;
location / {
try_files $uri $uri/ =404;
}
}
server {
listen 80;
server_name youtubecut.com www.youtubecut.com;
root /home/ubuntu/youtubecut-frontend/dist/;
index index.html;
location / {
try_files $uri $uri/ =404;
}
location /api/ {
proxy_pass http://127.0.0.1:8082/;
proxy_read_timeout 300s;
}
}