I followed the "deploying" instructions of the documentation: the only difference is that i run a "landingpage" on nginx, because of other web-applications like owncloud that should also run on nginx.
Owncloud (
https://localhost/owncloud) runs with my configuration, but if I want to access the
https://localhost/mayan i get this:
2016/05/10 15:11:37 [crit] 491#491 *21 connect() to unix:/usr/share/mayan-edms/uwsgi.sock failed (13: Permission denied) while connecting to upstream, client: 127.0.0.1, server: localhost, request: "GET /mayan/ HTTP/1.1", upstream: "uwsgi://unix:/usr/share/mayan-edms/uwsgi.sock:", host: "localhost", referrer: "http://localhost/mayan/"
do you have any suggestions regarding this?
the
/etc/nginx/conf.d/default.conf looks as follows:
upstream php-handler {
server 127.0.0.1:9000;
#server unix:/var/run/php7.0-fpm.sock;
}
server {
listen 80;
server_name localhost;
#enforce https
return 301 https://$server_name$request_uri;
}
server {
listen 443 ssl;
server_name localhost;
ssl on;
ssl_certificate /etc/nginx/ssl/cert/localhost.crt;
ssl_certificate_key /etc/nginx/ssl/private/localhost.key;
ssl_session_cache shared:SSL:1m;
ssl_session_timeout 5m;
# Add headers to serve security related headers
add_header Strict-Transport-Security "max-age=15768000; includeSubDomains; preload;";
add_header X-Content-Type-Options nosniff;
add_header X-Frame-Options "SAMEORIGIN";
add_header X-XSS-Protection "1; mode=block";
add_header X-Robots-Tag none;
add_header X-Download-Options noopen;
add_header X-Permitted-Cross-Domain-Policies none;
# Path to the root of your installation
root /var/www/;
# set max upload size
client_max_body_size 2G;
fastcgi_buffers 64 4K;
# Disable gzip to avoid the removal of the ETag header
gzip off;
# Uncomment if your server is build with the ngx_pagespeed module
# This module is currently not supported.
#pagespeed off;
# ownCloud blacklist
location ~ ^/owncloud/(?:\.htaccess|data|config|db_structure\.xml|README) {
deny all;
error_page 403 = /owncloud/core/templates/403.php;
}
location / {
index index.html index.php;
}
location /mayan/ {
include uwsgi_params;
uwsgi_pass unix:/usr/share/mayan-edms/uwsgi.sock;
client_max_body_size 100M; # Increse if your plan to upload bigger documents
proxy_read_timeout 40s; # Increase if your document uploads take more than 30 seconds
}
location /mayan/static {
alias /usr/share/mayan-edms/mayan/media/static;
expires 1h;
}
location /mayan/favicon.ico {
alias /usr/share/mayan-edms/mayan/media/static/appearance/images/favicon.ico;
expires 1h;
}
location /owncloud/ {
error_page 403 = /owncloud/core/templates/403.php;
error_page 404 = /owncloud/core/templates/404.php;
rewrite ^/owncloud/caldav(.*)$ /remote.php/caldav$1 redirect;
rewrite ^/owncloud/carddav(.*)$ /remote.php/carddav$1 redirect;
rewrite ^/owncloud/webdav(.*)$ /remote.php/webdav$1 redirect;
rewrite ^(/owncloud/core/doc[^\/]+/)$ $1/index.html;
# The following rules are only needed with webfinger
rewrite ^/owncloud/.well-known/host-meta /public.php?service=host-meta last;
rewrite ^/owncloud/.well-known/host-meta.json /public.php?service=host-meta-json last;
rewrite ^/owncloud/.well-known/carddav /remote.php/carddav/ redirect;
rewrite ^/owncloud/.well-known/caldav /remote.php/caldav/ redirect;
try_files $uri $uri/ index.php;
}
location ~ \.php(?:$|/) {
fastcgi_split_path_info ^(.+\.php)(/.+)$;
include fastcgi_params;
fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
fastcgi_param PATH_INFO $fastcgi_path_info;
fastcgi_param HTTPS on;
fastcgi_pass php-handler;
}
# Optional: set long EXPIRES header on static assets
location ~* ^/owncloud(/.+\.(jpg|jpeg|gif|bmp|ico|png|css|js|swf))$ {
expires 30d;
access_log off; # Optional: Don't log access to assets
}
}
Thank you!