Help me to config Nginx (Getting 403 forbidden)

omercan

When I enter my website http://www.girisimlist.com/, I'm gettin 403 forbidden. I installed Flarum and completed the installer. Here is my server block config file:

server {
listen 80;
root /home/nginx/girisimlist/;
index index.html index.html
server_name girisimlist.com www.girisimlist.com;
location / { try_files $uri $uri/ /index.php?$query_string; }
location /api { try_files $uri $uri/ /api.php?$query_string; }
location /admin { try_files $uri $uri/ /admin.php?$query_string; }
location /flarum {
deny all;
return 404;
}
location ~ .(css|js|gif|jpe?g|png)$ {
expires 1M;
add_header Pragma public;
add_header Cache-Control "public, must-revalidate, proxy-revalidate";
}
gzip on;
gzip_http_version 1.1;
gzip_vary on;
gzip_comp_level 6;
gzip_proxied any;
gzip_types application/atom+xml
application/javascript
application/json
application/vnd.ms-fontobject
application/x-font-ttf
application/x-web-app-manifest+json
application/xhtml+xml
application/xml
font/opentype
image/svg+xml
image/x-icon
text/css
text/plain
text/xml;
gzip_buffers 16 8k;
gzip_disable "MSIE [1-6].(?!.SV1)";
}

How can I fix this?

My nginx error log: 2016/08/09 18:47:39 [error] 5503#0: *12 directory index of "/home/nginx/girisimlist/" is forbidden, client: xx.xxx.xxx.xx, server: girisimlist.com, request: "GET / HTTP/1.1", host: "www.girisimlist.com"

^edit ^by ^mod: ^Removed ^ip

Kulga

omercan My nginx error log: 2016/08/09 18:47:39 [error] 5503#0: *12 directory index of "/home/nginx/girisimlist/

Ah yup, was going to ask for that error log. Fyi, be careful when posting error logs when they contain ip addresses (such as your personal ip). I removed it for you in the above post.

Try applying the same group change from the other thread to that same directory
EDIT:
Something like

sudo chgrp www-data /home/nginx/girisimlist

omercan

Kulga I tried before your post but nothing changed. :/

Kulga

omercan what're the permissions of /home/nginx/girisimlist/?

It can be difficult to find out the permissions of a specific directory with ls -l
You can try the below

stat -c '%n %U:%G-%a' /home/nginx/girisimlist

omercan

Kulga output for this: /home/nginx/girisimlist www-data:www-data-755

Kulga

alright, can you do

chmod /home/nginx/girisimlist 775

(The output of the above command told me the user:group and octal permissions btw)

omercan

Kulga thank you, I know it but this frustates me: chmod: invalid mode: '/home/nginx/girisimlist'
Try 'chmod --help' for more information.

Kulga

My mistake

chmod 775 /home/nginx/girisimlist

omercan

Kulga https://www.dropbox.com/s/i4jman3g1djwyqf/Screenshot%202016-08-09%2019.10.06.png?dl=0

But still getting 403.

Kulga

omercan Still saying this?

My nginx error log: 2016/08/09 18:47:39 [error] 5503#0: *12 directory index of "/home/nginx/girisimlist/" is forbidden, client: xx.xxx.xxx.xx, server: girisimlist.com, request: "GET / HTTP/1.1", host: "www.girisimlist.com"

omercan

Kulga No

Kulga

omercan Then, if it's still showing a error, what is the new output of error.log when you try to access the site?

omercan

Kulga Sorry, it's still gave error on nginx log:

2016/08/09 19:15:25 [error] 7470#0: *1 directory index of "/home/nginx/girisimlist/" is forbidden, client: xxxx, server: , request: "GET / HTTP/1.1", host: "ww$

Kulga

Well.. that's annoying.

Per your previous thread, you could clearly access the directory from the web prior.

As a experiment, let's try viewing the directory with the www-data user.

sudo -u www-data ls /home/nginx/girisimlist

omercan

Kulga With this, I can see the all files which in under /home/nginx/girisimlist

Kulga

omercan Ok, so it's definitely accessible through the php user and I assume looks like (verifying it is indeed the correct directory)

CONTRIBUTING.md  LICENSE  Procfile  Vagrantfile  admin.php  api.php  assets...

This may be unrelated but in your server config

index index.html index.html

There is no index.html, only index.php

Try replacing with

index index.php;

(and then restart nginx)

omercan

Kulga I think we are on the true way, now It's downloading file when u hit the girisimlist.com you can experince what am ı talking.