Canonical url

ChadJessen

I have read and read and researched and read some more and for some reason I am not understanding something. I am using digitalocean, ubuntu 18.04, nginx with server blocks. The following is my server block setup and I have everything so it points to https://whatsonyourscrubs.com - I am not sure what I am doing wrong were it still says that there are multiple domains being served. My understanding is that I can do this in the server block. The only thing I can think of is removing the www.whatsonyourscrubs.com from the server name but all the instructions i have read says to put it there. Any help would be appreciated. Please use simple terms and examples since I apparently am not able to comprehend this topic. Thank you much.

Edit: Now I can see that there are two server segments. The middle server segment needs to be removed correct?

Server block

server {

        root /var/www/whatsonyourscrubs.com/html/public;
        index index.php index.html index.htm index.nginx-debian.html;

        location ~ \.php$ {
                include snippets/fastcgi-php.conf;
                fastcgi_pass unix:/var/run/php/php7.2-fpm.sock;
        }

        location ~ /\.ht {
                deny all;
        }

        include /var/www/whatsonyourscrubs.com/html/.nginx.conf;

    listen 443 ssl; # managed by Certbot
    ssl_certificate /etc/letsencrypt/live/whatsonyourscrubs.com/fullchain.pem; # managed by Certbot
    ssl_certificate_key /etc/letsencrypt/live/whatsonyourscrubs.com/privkey.pem; # managed by Certbot
    include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
    ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot

}
server {
    if ($host = www.whatsonyourscrubs.com) {
        return 301 https://whatsonyourscrubs.com$request_uri;
    } # managed by Certbot


    if ($host = whatsonyourscrubs.com) {
        return 301 https://whatsonyourscrubs.com$request_uri;
    } # managed by Certbot

    listen 80;
        listen [::]:80;
        server_name whatsonyourscrubs.com www.whatsonyourscrubs.com;
        return 404; # managed by Certbot

}

ChadJessen

Should the server block be written more like this to clean it up?
Or, does the multiple domain have to do with the DNS setup?

I should have also mentioned that I am seeing the multiple domain message on the migratetoflarum website where you can test your website at.

Thank again for any help.
See original script above.

Modified script

server {

        listen 80;
        listen [::]:80;
        server_name whatsonyourscrubs.com
        return 404; # managed by Certbot

        root /var/www/whatsonyourscrubs.com/html/public;
        index index.php index.html index.htm index.nginx-debian.html;

        location ~ \.php$ {
                include snippets/fastcgi-php.conf;
                fastcgi_pass unix:/var/run/php/php7.2-fpm.sock;
        }

        location ~ /\.ht {
                deny all;
        }

    include /var/www/whatsonyourscrubs.com/html/.nginx.conf;

    listen 443 ssl; # managed by Certbot
    ssl_certificate /etc/letsencrypt/live/whatsonyourscrubs.com/fullchain.pem; # managed by Certbot
    ssl_certificate_key /etc/letsencrypt/live/whatsonyourscrubs.com/privkey.pem; # managed by Certbot
    include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
    ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot

    if ($host = www.whatsonyourscrubs.com) {
        return 301 https://whatsonyourscrubs.com$request_uri;
    } # managed by Certbot

    if ($host = whatsonyourscrubs.com) {
        return 301 https://whatsonyourscrubs.com$request_uri;
    } # managed by Certbot

}

matteocontrini

ChadJessen I would do something like this (untested). This redirects http to https and removes "www" when present.

# Redirect HTTP to HTTPS
server {
    listen 80;
    server_name whatsonyourscrubs.com www.whatsonyourscrubs.com;

    location / {
        return 301 https://whatsonyourscrubs.com$request_uri;
    }
}

# Redirect www to non-www (https)
server {
    server_name www.whatsonyourscrubs.com;
    
    listen 443 ssl; # managed by Certbot
    ssl_certificate /etc/letsencrypt/live/whatsonyourscrubs.com/fullchain.pem; # managed by Certbot
    ssl_certificate_key /etc/letsencrypt/live/whatsonyourscrubs.com/privkey.pem; # managed by Certbot
    include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
    ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
    
    return 301 https://whatsonyourscrubs.com$request_uri;
}

server {
    server_name whatsonyourscrubs.com
    
    listen 443 ssl; # managed by Certbot
    ssl_certificate /etc/letsencrypt/live/whatsonyourscrubs.com/fullchain.pem; # managed by Certbot
    ssl_certificate_key /etc/letsencrypt/live/whatsonyourscrubs.com/privkey.pem; # managed by Certbot
    include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
    ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
    
    root /var/www/whatsonyourscrubs.com/html/public;
    index index.php;

    location ~ \.php$ {
            include snippets/fastcgi-php.conf;
            fastcgi_pass unix:/var/run/php/php7.2-fpm.sock;
    }

    location ~ /\.ht {
            deny all;
    }

    include /var/www/whatsonyourscrubs.com/html/.nginx.conf;
}

ChadJessen

matteocontrini Thank you for your input. What you have suggested makes more sense than using the if statements.

Edit: I have tried the suggested setup. I receive the error when I run sudo nginx -t, but everything checks ok and successful. Do I need to somehow combine some of the server blocks within the conf file or something else? I haven't made this active yet, just setting it up and testing it first.

nginx: [warn] Conflicting server name whatsonyourscrubs.com on 0.0.0.0:80, ignored.

I did enable it to test it out and I get an err that states to many redirects. Not sure what the limit is.

matteocontrini

ChadJessen are you sure you did not include parts of the old configuration? There are no conflicts on the port 80 but just one server block in my version of the configuration

matteocontrini

Also, remember to update the config.php to set https://whatsonyourscrubs.com as the forum URL. That would be the "canonical" base URL with the configuration above

ChadJessen

I made a backup and deleted everything out of the file before putting in the new data. I have https://whatsonyourscrubs.com in the config data. I will try it again at home to make sure that I didn't miss anything.

Thanks again for the help. I will let you know what I find out.

ChadJessen

I am updating this so if anyone else runs into this, they can setup their code so it works. Feel free to let me know if there should be any changes or if there is anything else I should add. Hope this helps out others.

server {
	listen 80;
	server_name whatsonyourscrubs.com www.whatsonyourscrubs.com;
	return 301 https://whatsonyourscrubs.com$request_uri;
}

server {
	listen 443 ssl;
	server_name www.whatsonyourscrubs.com;
	
	ssl_certificate /etc/letsencrypt/live/whatsonyourscrubs.com/fullchain.pem;
        ssl_certificate_key /etc/letsencrypt/live/whatsonyourscrubs.com/privkey.pem;
	add_header Strict-Transport-Security "max-age=1576800; preload" always;	
	
	return 301 https://whatsonyourscrubs.com$request_uri;
}

server {
	listen 443 ssl;
	server_name whatsonyourscrubs.com;
	
	ssl_certificate /etc/letsencrypt/live/whatsonyourscrubs.com/fullchain.pem;
        ssl_certificate_key /etc/letsencrypt/live/whatsonyourscrubs.com/privkey.pem;
        include /etc/letsencrypt/options-ssl-nginx.conf;
        ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem;
	
	add_header Content-Security-Policy upgrade-insecure-requests;
	add_header Strick-Transport-Security "max-age=63072000; preload" always;
	
	root /var/www/whatsonyourscrubs.com/html/public;
	index index.php index.html index.htm index.nginx-debian.html;
	
	location ~ \.php$ {
		include snippets/fastcgi-php.conf;
		fastcgi_pass unix:/var/run/php/php7.2-fpm.sock;
	}
	
	location ~ /\.ht {
		deny all;
	}

	include /var/www/whatsonyourscrubs.com/html/.nginx.conf;
}