enabling https on BookStack v0.19.0

[sumptuoust]

Have registered an SSL certificate for bookStack v0.19.0 running in my organisation when I change the nginx.config as from my ssl cert provider but after that BookStack v0.19.0 wont run.

[Shackelford-Arden]

Could you provide more information such as your nginx.conf along with any errors that you see?

[sumptuoust]

nginx.conf.txt

See attached config and the screenshot of the error message

[lommes]

Since I'm not familiar with nginx I'm just curious.

Do the directives es and esuser exist?

[domainzero]

@sumptuoust
Your config is pretty hosed. I straightened out your nginx.conf below.

user www-data;
worker_processes auto;
pid /run/nginx.pid;

events {
	worker_connections 768;
	# multi_accept on;
}

http {
	sendfile on;
	tcp_nopush on;
	tcp_nodelay on;
	keepalive_timeout 65;
	types_hash_max_size 2048;
	include /etc/nginx/mime.types;
	default_type application/octet-stream;
	ssl_protocols TLSv1 TLSv1.1 TLSv1.2; # Dropping SSLv3, ref: POODLE
	ssl_prefer_server_ciphers on;

	access_log /var/log/nginx/access.log;
	error_log /var/log/nginx/error.log;

	gzip on;
	gzip_disable "msie6";

	include /etc/nginx/conf.d/*.conf;
	include /etc/nginx/sites-enabled/*;
}

There are a few ways to create virtual hosts in nginx - I'm going to detail the method I prefer.
Create a new file in /etc/nginx/sites-available - create the directory if it doesn't exist. This file is going to define the BookStack virtual host. Drop something like the below in - subbing in your own paths and names.

# redirect all http requests to https
server {
        listen 80;
        server_name <your_server_name or default>;
        return  301 https://$server_name$request_uri;
}

server {
        listen 443 ssl;
        server_name <your_server_name or default>;
        ssl_certificate    /etc/nginx/CA.crt;
        ssl_certificate_key    /etc/nginx/km.ananda.com.mm.key;
        ssl_stapling on;
        ssl_stapling_verify on;
        ssl_protocols TLSv1.1 TLSv1.2;
        add_header Strict-Transport-Security "max-age=31536000";

        root /path/to/bookstack/install/public;
        index index.php;
        gzip on;
        # pass php requests to php handler
        location ~ \.php {
                fastcgi_pass unix:/var/run/php-fpm/php-fpm.sock;
                fastcgi_index index.php;
                include fastcgi_params;
                fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
        }
        location / {
                try_files $uri $uri/ /index.php?$query_string;
        }
}

Finally, create a symbolic link from /etc/nginx/sites-available/site to /etc/nginx/sites-enabled/site and reload/restart nginx.

[lommes]

@ssddanbrown I think this can be closed. It seems like the problem were non-existing directives in nginx config.

[ssddanbrown]

Thanks for letting me know @lommes