Nginx secure port not working and upload/download fail

I install v.6.2.3 on raspberry pi and follow this instruction below;
https://manual.seafile.com/deploy/deploy_with_nginx.html
But https port 8080 cannot work, and seafile url always point to http port 8000. Running “seafile.sh start” on default port 8000 and firewall on router already open for port 8000 and 8080-8082.
Also, even url service http://mysites.strangled.net:8000 working, but cannot upload or download files. Can anybody help me what I’m doing wrong?

/etc/nginx/site-available/seahub

ccnet.conf

seafdav.conf

seafile.conf

seahub_settings.py

Btw, seafile working fine, including upload/download if I’m using fastcgi instead of wsgi which is recommended in link below

nginx config for fastcgi below, nothing change on seafile config, except need to run “seahub.sh start-fascgi”

/etc/nginx/site-available/seahub

The reason I want to run in wsgi mode because oauth won’t work in fastcgi
Error “Sorry, but the requested page could not be found.” if trying to do single login in fastcgi mode

Port 8080 är not a SSL port use 443 instead

port 443 is already being used. any other possible port?

I do another test to confirm whether this is SSL port issue.
I comment out ssl on, ssl_certificate and ssl_certificate_key in /etc/nginx/site-available/seahub
Problem still exist, cannot access port 8080
So this confirms is NOT SSL port issue.

8443 is the official alternative port for ssl other than 443.

But why do you not just work with a reverse proxy so you can use 443 for all services?

And if you use toher port then 443 or 80 you have to provide it in URL. So will have something like https://seafile.example.com:8080/ cause browser automatically using port 80 only for HTTP and 443 for HTTPS all toher ports have to be written in URL

I’m new to this so called reverse proxy. Is it possible to setup if different services running on same host?
Also if some services not going to wan instead only called from local ip client, is it still possible using reverse proxy? Any example how to setup using nginx?

Easy solution is have to Apache/NGinx server. For every service have (sub)domain name. NGinx and apache supports VirtualHosts where you can define domain name and what do with them so you can run 4 websites on 80(http) or 443(https). Apache/NGinex Listening on these ports and by domain name routing requests to right virtual host.

Reverse proxy
You can setup on VirtualHost(said above) proxy which mean that all your comunication with your service go over this virtualhost and clients only see that their are communicate with your apache.

Here is manual how to setup reverse proxy on NGinx to run Seafile.
https://manual.seafile.com/deploy/deploy_with_nginx.html

1 Like

not every services that I have using apache.
for ex. i have amazon alexa emulator service running on java and must be assign to port 80 in order for echo devices to be recognize
fyi about alexa emulator below

Yes, and you can access your Java app over Apache and reverse proxy :wink:

but alexa bridge emulator service doesn’t have domain name since i don’t want to expose it to internet. how to do?

You mean it’s only local network service? Then just setup custom domain in your local DNS server.

Here is a good guide that I have written.

There you can read how to setup a NGINX front end reveres proxy.

Calby,
my problem is understanding how to implement if no domain name?
alexa emulator bridge cannot define any domain name, only internal ip address

Let me describe my problem, maybe I understand it wrongly
I have 3 application running on same host server, alexa emulator bridge, home-assistant and seafile.
So since those apps running on same host, then only 1 local DNS server, right?

Your local DNS server is on your router.

yes, i know local DNS server in router
but that means those 3 applications which all using port 443 in same host have same DNS name. in this case, how to setup reverse proxy?

Are all going to have access out to internet?
The only ones that need to bee used with reverse proxy is the once’s that are going out on the internet