update nginx config and ckan version

DCOR-dev · Apr 17, 2024 · 8c5a371 · 8c5a371
1 parent 866b265
commit 8c5a371
Show file tree

Hide file tree

Showing 2 changed files with 18 additions and 4 deletions.
diff --git a/docs/sec_self_hosting/nginx_ckan_config.conf b/docs/sec_self_hosting/nginx_ckan_config.conf
@@ -59,6 +59,9 @@ server {
         proxy_store off;
         proxy_cache off;
         gzip off;
+        # when a client closes the connection then keep the channel to uwsgi open.
+        # Otherwise uwsgi throws an IOError and possibly segfaults.
+        proxy_ignore_client_abort on;
     }
 
     # static/fully cached locations
@@ -81,6 +84,9 @@ server {
         proxy_hide_header Cache-Control;
         proxy_hide_header Pragma;
         proxy_hide_header Set-Cookie;
+        # when a client closes the connection then keep the channel to uwsgi open.
+        # Otherwise uwsgi throws an IOError and possibly segfaults.
+        proxy_ignore_client_abort on;
     }
 
     # upload via API
@@ -91,9 +97,6 @@ server {
         client_max_body_size 100G;
         # Let uWSGI handle buffering (otherwise uWSGI gets stuck for some reason)
         proxy_request_buffering off;
-        # Determines whether the connection with a proxied server should be closed
-        # when a client closes the connection without waiting for a response.
-        proxy_ignore_client_abort on;
         # Sets the HTTP protocol version for proxying. By default, version 1.0
         # is used. Version 1.1 is recommended for use with keepalive
         # connections and NTLM authentication.
@@ -112,6 +115,9 @@ server {
         # Remove the Connection header if the client sends it,
         # it could be "close" to close a keepalive connection
         proxy_set_header Connection "";
+        # when a client closes the connection then keep the channel to uwsgi open.
+        # Otherwise uwsgi throws an IOError and possibly segfaults.
+        proxy_ignore_client_abort on;
     }
 
     # GET allow-list for ckan-related directories
@@ -128,6 +134,10 @@ server {
         # proxy_no_cache $cookie_remember_token;
         # proxy_cache_valid 30m;
         # proxy_cache_key $host$scheme$proxy_host$request_uri;
+        #
+        # when a client closes the connection then keep the channel to uwsgi open.
+        # Otherwise uwsgi throws an IOError and possibly segfaults.
+        proxy_ignore_client_abort on;
     }
 
     # GET/POST allow-list for ckan-related directories (cached if user not logged-in)
@@ -141,6 +151,10 @@ server {
         # proxy_no_cache $cookie_remember_token;
         # proxy_cache_valid 30m;
         # proxy_cache_key $host$scheme$proxy_host$request_uri;
+        #
+        # when a client closes the connection then keep the channel to uwsgi open.
+        # Otherwise uwsgi throws an IOError and possibly segfaults.
+        proxy_ignore_client_abort on;
     }
 
     # Redirect /UUID shortcut to /dataset/UUID

diff --git a/docs/sec_self_hosting/upgrade.rst b/docs/sec_self_hosting/upgrade.rst
@@ -55,7 +55,7 @@ steps to upgrade CKAN from the `CKAN docs
    Install the latest version of CKAN for your system::
 
      CKANMINOR=2.10
-     CKANPATCH=2.10.3
+     CKANPATCH=2.10.4
      UBUNTURELEASE=$(lsb_release -cs)
      DLNAMESERVR=python-ckan_${CKANMINOR}-${UBUNTURELEASE}_amd64.deb
      DLNAMELOCAL=python-ckan_${CKANPATCH}-${UBUNTURELEASE}_amd64.deb