# Nginx reverse proxy issue on solidweb.org

**URL:** <https://forum.solidproject.org/t/nginx-reverse-proxy-issue-on-solidweb-org/3351>\
**Category:** General Discussion\
**Created:** [July 28, 2020, 5:09pm UTC](https://forum.solidproject.org/t/nginx-reverse-proxy-issue-on-solidweb-org/3351 "2020-07-28T17:09:05Z")\
**Posts on this page:** 7\
**Page:** 1

<div class="post-metadata">

**Author:** ![ewingson](https://dub1.discourse-cdn.com/flex017/user_avatar/forum.solidproject.org/ewingson/32/454_2.png) [@ewingson](https://forum.solidproject.org/u/ewingson)\
**Post date:** [July 28, 2020, 5:09pm UTC](https://forum.solidproject.org/t/nginx-reverse-proxy-issue-on-solidweb-org/3351/1 "2020-07-28T17:09:05Z")

</div>

solid is running on port 8443.  
I have used the following `sites-available/default` (as in [https://github.com/solid/node-solid-server/wiki/Running-Solid-behind-a-reverse-proxy](https://github.com/solid/node-solid-server/wiki/Running-Solid-behind-a-reverse-proxy))

```auto
# Nginx configuration

## Redirects all HTTP traffic to the HTTPS host
server {
  ## In case of conflict, either remove "default_server" from the listen line below,
  ## or delete the /etc/nginx/sites-enabled/default file.
  listen 0.0.0.0:80;
  listen [::]:80;
  server_name solid.example.org;
  server_tokens off; ## Don't show the nginx version number, a security best practice
  return 301 https://$http_host$request_uri;
  access_log /var/log/nginx/solid_access.log;
  error_log /var/log/nginx/solid_error.log;
}

server {
  listen *:443 ssl;
  listen [::]:443 ssl;
  server_name solid.example.org;
  server_tokens off;

  access_log /var/log/nginx/solid_ssl_access.log;
  error_log /var/log/nginx/solid_ssl_error.log;

  ## [Optional] Enable HTTP Strict Transport Security
  ## HSTS is a feature improving protection against MITM attacks
  ## For more information see: https://www.nginx.com/blog/http-strict-transport-security-hsts-and-nginx/
  add_header Strict-Transport-Security "max-age=31536000; includeSubDomains";

  location / {
    proxy_pass https://localhost:8443;

    gzip off;
    proxy_redirect off;

    ## Some requests take more than 30 seconds.
    proxy_read_timeout 300;
    proxy_connect_timeout 300;
    proxy_redirect off;

    proxy_http_version 1.1;

    proxy_set_header Host $http_host;
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Forwarded-Ssl on;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header X-Forwarded-Proto $scheme;
  }

}

```

solid\_ssl\_error.log gives `2020/07/29 07:48:44 [error] 6754#0: *2 no "ssl_certificate" is defined in server listening on SSL port while SSL handshaking, client: 188.101.79.67, server: 0.0.0.0:443`

next step I will try is [https://docs.nginx.com/nginx/admin-guide/security-controls/terminating-ssl-http/](https://docs.nginx.com/nginx/admin-guide/security-controls/terminating-ssl-http/)

---

<div class="post-metadata">

**Author:** ![aveltens](https://dub1.discourse-cdn.com/flex017/user_avatar/forum.solidproject.org/aveltens/32/3987_2.png) [@aveltens](https://forum.solidproject.org/u/aveltens)\
**Post date:** [July 30, 2020, 6:59pm UTC](https://forum.solidproject.org/t/nginx-reverse-proxy-issue-on-solidweb-org/3351/2 "2020-07-30T18:59:13Z")

</div>

> [@ewingson](#):
>
> no “ssl\_certificate” is defined in server listening on SSL port

It says it right away. Indeed I cannot find any `ssl_certificate` and `ssl_certificate_key` in your nginx config. Appears to be nothing Solid related.

---

<div class="post-metadata">

**Author:** ![ewingson](https://dub1.discourse-cdn.com/flex017/user_avatar/forum.solidproject.org/ewingson/32/454_2.png) [@ewingson](https://forum.solidproject.org/u/ewingson)\
**Post date:** [July 31, 2020, 5:45am UTC](https://forum.solidproject.org/t/nginx-reverse-proxy-issue-on-solidweb-org/3351/3 "2020-07-31T05:45:51Z")

</div>

admitted, right, closed

---

<div class="post-metadata">

**Author:** ![aveltens](https://dub1.discourse-cdn.com/flex017/user_avatar/forum.solidproject.org/aveltens/32/3987_2.png) [@aveltens](https://forum.solidproject.org/u/aveltens)\
**Post date:** [July 31, 2020, 8:04am UTC](https://forum.solidproject.org/t/nginx-reverse-proxy-issue-on-solidweb-org/3351/4 "2020-07-31T08:04:30Z")

</div>

ok, it is in so far Solid related as the documentation you mentioned does not contain a `ssl_certificate` either. So if you manage to have a working config, it would be helpful to submit a PR to that example.

---

<div class="post-metadata">

**Author:** ![bourgeoa](https://dub1.discourse-cdn.com/flex017/user_avatar/forum.solidproject.org/bourgeoa/32/291_2.png) [@bourgeoa](https://forum.solidproject.org/u/bourgeoa)\
**Post date:** [August 2, 2020, 4:31pm UTC](https://forum.solidproject.org/t/nginx-reverse-proxy-issue-on-solidweb-org/3351/5 "2020-08-02T16:31:36Z")

</div>

I don’t know if your problem is solved.  
This is what I used for the server where solid.community is installed behind nginx

```auto
https://gitlab.com/solid.community/pro# redirect all http to https
server {
	listen 80 default_server;
	listen [::]:80 default_server;
	server_name _;
	return 301 https://$host$request_uri;
}

```

> **[redirect on solid.community from http to https (#3) · Issues · solid.community...](https://gitlab.com/solid.community/proposals/-/issues/3)**
>
> from @ewingson moved from

---

<div class="post-metadata">

**Author:** ![ewingson](https://dub1.discourse-cdn.com/flex017/user_avatar/forum.solidproject.org/ewingson/32/454_2.png) [@ewingson](https://forum.solidproject.org/u/ewingson)\
**Post date:** [August 2, 2020, 6:09pm UTC](https://forum.solidproject.org/t/nginx-reverse-proxy-issue-on-solidweb-org/3351/6 "2020-08-02T18:09:30Z")

</div>

thanx @bourgeoa .

this prob is solved, others arose. have no time nor mind to keep track of [solidweb.org](http://solidweb.org) at the moment.

---

<div class="post-metadata">

**Author:** ![ewingson](https://dub1.discourse-cdn.com/flex017/user_avatar/forum.solidproject.org/ewingson/32/454_2.png) [@ewingson](https://forum.solidproject.org/u/ewingson)\
**Post date:** [August 9, 2020, 3:24am UTC](https://forum.solidproject.org/t/nginx-reverse-proxy-issue-on-solidweb-org/3351/7 "2020-08-09T03:24:13Z")

</div>

@aveltens @bourgeoa  
I dont know, if I can generalize my config. I’ ve got it running using [https://gist.github.com/ewingson/c6e97a996aa51eac9f7fd1b7eaf14dc4](https://gist.github.com/ewingson/c6e97a996aa51eac9f7fd1b7eaf14dc4)  
I don’ t dare a PR