nginx：[emerg] 在 /etc/nginx/sites-enabled/wiki.[site].com:48 中不允许使用“上游”指令

Question

我正在尝试使用 Nginx 配置 mediawiki 实例。我以前在另一台服务器上做过，并且在那里运行良好。但是，当我将相同的 nginx vhost 文件复制到此服务器（更改 server_name 等相关位）时，nginx 给我以下错误：

nginx: [emerg] "upstream" directive is not allowed here in /etc/nginx/sites-enabled/wiki.[site].com:48

在我的另一台服务器上，这根本没有给我任何错误并且完全按预期工作。我在任一服务器上使用相同版本的 nginx (1.14)，并且 nginx.conf 文件是相同的。

我完全被难住了，任何帮助将不胜感激。

完整的vhost文件如下：

    server{
            listen 80;
    listen [::]:80;
    server_name wiki.[site].work;
        return 301 https://wiki.[site].work$request_uri;
}

server {
    listen [::]:443 ssl; # managed by Certbot
    listen 443 ssl; # managed by Certbot

    server_name wiki.[site].work;
    root /var/www/wiki.[site].work;
    index index.php;
    autoindex off;


    ssl_certificate /etc/letsencrypt/live/[site].work/cert.pem; # managed by Certbot
    ssl_certificate_key /etc/letsencrypt/live/[site].work/privkey.pem; # managed by Certbot
    include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
    ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot

    client_max_body_size 5m;
    client_body_timeout 60;

    location / {
        index index.php5;
        rewrite ^/([^?]*)(?:\?(.*))? /index.php5?title=$1&$2 last;
    }
    location ~ \.php5?$ {
        try_files $uri =404;
        include fastcgi_params;
        fastcgi_pass php5-fpm-sock;
        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
        fastcgi_intercept_errors on;
fastcgi_param HTTPS on;
}

    location ~ \.php?$ {
        try_files $uri =404;
fastcgi_param HTTPS on;
   include fastcgi_params;
        fastcgi_pass php5-fpm-sock;
        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
        fastcgi_intercept_errors on;
    }

    upstream php5-fpm-sock {
        server unix:/var/run/php5-fpm.soc;
fastcgi_param HTTPS on;
}

}

Answer 1

虽然我的用例是负载平衡，但原则仍然适用，最好将上游子句配置添加到位于文件夹中的单独文件上etc/nginx/sites-available/。作为参考，下面是我使用的nginx.conf文件：

user www-data;
worker_processes auto;
pid /run/nginx.pid;
include /etc/nginx/modules-enabled/*.conf;

events {
    worker_connections 768;
}

http { 
    sendfile on;
    tcp_nopush on;
    tcp_nodelay on;
    keepalive_timeout 65;
    types_hash_max_size 2048;    
    include /etc/nginx/mime.types;
    default_type application/octet-stream;    
    ssl_protocols TLSv1 TLSv1.1 TLSv1.2 TLSv1.3;
    ssl_prefer_server_ciphers on;    
    access_log /var/log/nginx/access.log;
    error_log /var/log/nginx/error.log;    
    gzip on;    
    include /etc/nginx/conf.d/*.conf;
    include /etc/nginx/sites-enabled/*;
}

以及我在文件夹中创建的文件（称为Default ）sites-available

server {
    listen 443 ssl default_server;
    listen [::]:443 ssl default_server;
    ssl_certificate /etc/nginx/ssl/cert.pem;
    ssl_certificate_key /etc/nginx/ssl/cert-key.pem;
    server_name my_dummy_server;

  location / {
             proxy_pass http://myapp1;
            index index.html index.htm;
            try_files $uri $uri/ /index.html =404;
          }
}
upstream myapp1
{
        server 192.168.1.154;
        server 192.168.1.164;
        server 192.168.1.174;
}