为什么我在Docker容器中禁止使用Nginx 403

Question

我尝试使用本文https://medium.com/@pentacent/nginx-and-lets-encrypt-with-docker-in-less-than-5-minutes-b4b8a60d3a71通过“让我们加密来设置SSL”>

我的Nginx配置

server {
    listen       80;

    server_name kcr.ttfr.ru;
    server_name  www.kcr.ttfr.ru;

    root /var/www/k4fntr/public;
    index /frontend/index.html;

    client_max_body_size 128M;

    gzip on; # enable gzip
    gzip_disable "msie6";
    gzip_types text/plain text/css application/json application/x-javascript text/xml application/xml application/xml+rss text/javascript application/javascript;

    access_log  /var/log/nginx/access.log  main;
    error_log   /var/log/nginx/error.log debug;

    location / {
         try_files /frontend/$uri $uri $uri/ /index.php?$args; # permalinks
         client_max_body_size 128M;
    }

    location ~ /\. {
            deny all; # deny hidden files
    }

    location ~* /(?:uploads|files)/.*\.php$ {
            deny all; # deny scripts
    }

    location ~* ^.+\.(ogg|ogv|svg|svgz|eot|otf|woff|mp4|ttf|rss|atom|jpg|jpeg|gif|png|ico|zip|tgz|gz|rar|bz2|doc|xls|exe|ppt|tar|mid|midi|wav|bmp|rtf)$ {
            access_log off;
            log_not_found off;
            expires max; # cache static files
            try_files /frontend/$uri $uri $uri/ /index.php?$args; # permalinks
    }

    location ~ \.php$ {
        proxy_set_header X-Real-IP $remote_addr;
        fastcgi_pass   k4fntr_php-fpm:9000;
        fastcgi_index  index.php;
        include        /etc/nginx/fastcgi_params;
        fastcgi_param  SCRIPT_FILENAME $document_root$fastcgi_script_name;
        fastcgi_param  DOCUMENT_ROOT $document_root;
        fastcgi_read_timeout 300;
    }

    location /socket.io {
        proxy_pass http://k4fntr_echo:6001;
        proxy_http_version 1.1;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection "Upgrade";
    }

    location ~ /\.ht {
        deny all;
    }

    listen 443 ssl;
    ssl_certificate /etc/letsencrypt/live/kcr.ttfr.ru/fullchain.pem;
    ssl_certificate_key /etc/letsencrypt/live/kcr.ttfr.ru/privkey.pem;
    include /etc/letsencrypt/options-ssl-nginx.conf;
    ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem;

    location /.well-known/acme-challenge/ { root /var/www/certbot; }
}
但是我的挑战因URL /.well-known/acme-challenge/返回403：Forbidden而失败

我的nginx配置出了什么问题？

我尝试使用本文https://medium.com/@pentacent/nginx-and-lets-encrypt-with-docker-in-less-than-5-minutes-b4b8a60d3a71与我们加密来设置ssl我的nginx配置服务器{监听...

Answer 1

将您的位置更改为类似的内容：