403 Forbidden after update

MikeJones

I think I might have a permissions issue after update to beta 8:

ubuntu@ip-172-31-46-90:/var/www/seekadventure.net$ ls -la
total 244
drwxrwxr-x  5 www-data www-data   4096 Dec 20 01:44 .
drwxr-xr-x  5 root     root       4096 Dec 19 05:45 ..
-rw-r--r--  1 root     root        252 Dec  6 08:27 CHANGELOG.md
-rw-r--r--  1 root     root       1490 Dec  6 08:27 composer.json
-rw-r--r--  1 root     root     191816 Dec 20 01:44 composer.lock
-rw-r--r--  1 www-data www-data    511 Dec 19 03:33 config.php
-rw-r--r--  1 root     root        354 Dec  6 08:27 .editorconfig
-rw-r--r--  1 root     root        311 Dec  6 08:27 extend.php
-rw-r--r--  1 root     root        487 Dec  6 08:27 flarum
-rw-r--r--  1 root     root       1073 Dec  6 08:27 LICENSE
-rw-r--r--  1 root     root       1509 Dec  6 08:27 .nginx.conf
drwxr-xr-x  3 www-data www-data   4096 Dec 20 01:32 public
-rw-r--r--  1 root     root       2623 Dec  6 08:27 README.md
drwxr-xr-x 10 root     root       4096 Dec  6 08:27 storage
drwxr-xr-x 34 root     root       4096 Dec 20 01:44 vendor

jordanjay29

MikeJones You need to chown all those root owned files to www-data.

chown -R www-data:www-data /var/www/seekadventure.net

MikeJones

jordanjay29 awesome, will give it a try after work tomorrow!

MikeJones

jordanjay29

I gave it a try but still same 403 error:

ubuntu@ip-172-31-46-90:/var/www$ ls -la
total 20
drwxr-xr-x  5 root     root     4096 Dec 19 05:45 .
drwxr-xr-x 14 root     root     4096 Apr 20  2018 ..
drwxrwxr-x  7 ubuntu   www-data 4096 Dec 19 03:33 copy
drwxr-xr-x  2 root     root     4096 Apr 20  2018 html
drwxrwxr-x  5 www-data www-data 4096 Dec 20 01:44 seekadventure.net
ubuntu@ip-172-31-46-90:/var/www$ cd seekadventure.net/
ubuntu@ip-172-31-46-90:/var/www/seekadventure.net$ ls -la
total 244
drwxrwxr-x  5 www-data www-data   4096 Dec 20 01:44 .
drwxr-xr-x  5 root     root       4096 Dec 19 05:45 ..
-rw-r--r--  1 www-data www-data    252 Dec  6 08:27 CHANGELOG.md
-rw-r--r--  1 www-data www-data   1490 Dec  6 08:27 composer.json
-rw-r--r--  1 www-data www-data 191816 Dec 20 01:44 composer.lock
-rw-r--r--  1 www-data www-data    511 Dec 19 03:33 config.php
-rw-r--r--  1 www-data www-data    354 Dec  6 08:27 .editorconfig
-rw-r--r--  1 www-data www-data    311 Dec  6 08:27 extend.php
-rw-r--r--  1 www-data www-data    487 Dec  6 08:27 flarum
-rw-r--r--  1 www-data www-data   1073 Dec  6 08:27 LICENSE
-rw-r--r--  1 www-data www-data   1509 Dec  6 08:27 .nginx.conf
drwxr-xr-x  3 www-data www-data   4096 Dec 20 01:32 public
-rw-r--r--  1 www-data www-data   2623 Dec  6 08:27 README.md
drwxr-xr-x 10 www-data www-data   4096 Dec  6 08:27 storage
drwxr-xr-x 34 www-data www-data   4096 Dec 20 01:44 vendor
ubuntu@ip-172-31-46-90:/var/www/seekadventure.net$

clarkwinkelmann

MikeJones is the 403 error from Apache or Flarum ?

If it's Apache, have a look at the server log files, they should tell you why access was denied, and which files are causing it if it's a file permissions issue.

If it's a Flarum error page, it probably just means you have to go to /admin to finish the update. Did you already do that ?

MikeJones

clarkwinkelmann I have not done the /admin will try that tonight. Thanks!

MikeJones

clarkwinkelmann So I went to mysite.com/admin and it just brings up "file not found"

I am running nginx, but will look into the server logs....

MikeJones

After looking at the server log it does not seem to be a server issue. All issues were reported on the 12th of december:

2018/12/20 14:54:50 [error] 9919#9919: *233 directory index of "/var/www/seekadventure.net/" is forbidden, client: 76.176.176.95, server: www.seekadventure.net, reques$
2018/12/20 14:54:53 [error] 9919#9919: *233 directory index of "/var/www/seekadventure.net/" is forbidden, client: 76.176.176.95, server: www.seekadventure.net, reques$
2018/12/20 14:54:54 [error] 9919#9919: *233 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 76.176.176.95, server$
2018/12/20 14:54:55 [error] 9919#9919: *233 directory index of "/var/www/seekadventure.net/" is forbidden, client: 76.176.176.95, server: www.seekadventure.net, reques$
2018/12/20 14:54:56 [error] 9919#9919: *233 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 76.176.176.95, server$
2018/12/20 14:55:35 [error] 9919#9919: *233 directory index of "/var/www/seekadventure.net/" is forbidden, client: 76.176.176.95, server: www.seekadventure.net, reques$
2018/12/20 14:55:36 [error] 9919#9919: *233 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 76.176.176.95, server$
2018/12/21 01:47:26 [error] 9919#9919: *261 directory index of "/var/www/seekadventure.net/" is forbidden, client: 76.176.176.95, server: www.seekadventure.net, reques$
2018/12/21 01:47:27 [error] 9919#9919: *261 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 76.176.176.95, server$
2018/12/21 01:47:32 [error] 9919#9919: *261 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 76.176.176.95, server$
2018/12/21 01:48:36 [error] 9919#9919: *261 directory index of "/var/www/seekadventure.net/" is forbidden, client: 76.176.176.95, server: www.seekadventure.net, reques$
2018/12/21 01:48:53 [error] 9919#9919: *261 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 76.176.176.95, server$
2018/12/21 01:50:10 [error] 9919#9919: *270 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 66.249.66.135, server$

clarkwinkelmann

MikeJones did you update your url rewriting for beta 8 ? https://flarum.org/docs/install.html#url-rewriting

I don't know if that's your case, but if you still have the betas7 rewrites, nginx will try to load files that don't exist anymore and might cause such an error.

MikeJones

clarkwinkelmann

Would this be in the /etc/nginx/nginx.conf file?

Mine currently looks like this;

is this the file I should add it too?

MikeJones

I am also looking into my /etc/nginx/sites-available/seekadventure.net file

server {
  # Security headers
  add_header Strict-Transport-Security "max-age=2592000; includeSubDomains; preload";


  root /var/www/seekadventure.net;
  index index.php index.html index.htm;
  error_log /var/log/nginx/error.log error;

  server_name www.seekadventure.net;

Since flarum beta 8 has a public folder now should my root be:

root /var/www/seekadventure.net/public;

MikeJones

adding /public worked!!

New issues now but will start another thread after I look for some answers on he flarum

0E800

I am having similar issue. Hope its okay I piggy back on this thread vs create a new one for the same issue.

Here is my server block:

#This server block will redirect http:// to https://
server {
    listen 80;
    listen [::]:80;
    server_name keys-daggers.org;
    return 301 https://keys-daggers.org$request_uri;
}

#This is the server block actually delivering content to the visitor

server {
listen 443 ssl http2 default_server;
listen [::]:443 ssl http2 default_server;
include snippets/snakeoil.conf;
include snippets/ssl-params.conf;
include /var/www/K_D/.nginx.conf;	
server_name keys-daggers.org;
root /var/www/K_D/public/;
}

I am using the .nginx.conf that came with Beta 8.

Nginx error.log:

2019/01/21 19:22:43 [error] 2991#2991: *7 directory index of "/var/www/K_D/public/" is forbidden, client: 73.202.21.26, server: keys-daggers.org, request: "GET / HTTP/2.0", host: "keys-daggers.org"

Directory perms:

ubuntu@v22017014258144095:/var/www/K_D$ ls -la
total 244
drwxrwxr-x  5 www-data www-data   4096 Jan 21 19:01 .
drwxr-xr-x 12 www-data www-data   4096 Jan 21 17:50 ..
-rw-r--r--  1 www-data www-data    252 Dec  6 00:27 CHANGELOG.md
-rw-r--r--  1 www-data www-data   1490 Dec  6 00:27 composer.json
-rw-r--r--  1 www-data www-data 192368 Jan 21 17:53 composer.lock
-rw-r--r--  1 www-data www-data    475 Jan 21 18:11 config.php
-rw-r--r--  1 www-data www-data    354 Dec  6 00:27 .editorconfig
-rw-r--r--  1 www-data www-data    311 Dec  6 00:27 extend.php
-rw-r--r--  1 www-data www-data    487 Dec  6 00:27 flarum
-rw-r--r--  1 www-data www-data   1073 Dec  6 00:27 LICENSE
-rw-r--r--  1 www-data www-data   1509 Dec  6 00:27 .nginx.conf
drwxrwxr-x  3 www-data www-data   4096 Jan 21 19:08 public
-rw-r--r--  1 www-data www-data   2623 Dec  6 00:27 README.md
drwxrwxr-x 10 www-data www-data   4096 Dec  6 00:27 storage
drwxr-xr-x 34 www-data www-data   4096 Jan 21 18:12 vendor
ubuntu@v22017014258144095:/var/www/K_D$

As per the instructions when I ran initial setup I was required to 0775 public/assets and storage .

When I try to goto https://keys-daggers.org/public it actually downloads a public file.

I am fairly certain this is a file permission issue, any guidance would be greatly appreciated.

Edit: The custom 403 page I created loads fine, so things appear correct.