antes de mirar mi configuración, quiero disculparme de antemano por el desorden. Es la primera vez que trabajo con apache y nginx y básicamente copié todos los consejos del desbordamiento de pila en mi configuración con la esperanza de que algo funcionara.

Después de reiniciar mi Raspberry Pi, cuando intento acceder a mi servidor nextcloud en xxx.duckdns.org, recibo un error de puerta de enlace incorrecta 502 de nginx.

Configuración de Nginx:

 map $http_upgrade $connection_upgrade { default upgrade; '' close; } server { listen 80; server_name xxx.duckdns.org; return 301 https://$host$request_uri; } # SSL configuration server { listen 443 ssl; server_name xxx.duckdns.org; ssl_certificate /etc/letsencrypt/live/xxx.duckdns.org/fullchain.pem; # managed by Certbot ssl_certificate_key /etc/letsencrypt/live/xxx.duckdns.org/privkey.pem; # managed by Certbot # Improve HTTPS performance with session resumption ssl_session_cache shared:SSL:10m; ssl_session_timeout 5m; # Enable server-side protection against BEAST attacks ssl_prefer_server_ciphers on; ssl_ciphers xxx; # Disable SSLv3 ssl_protocols TLSv1 TLSv1.1 TLSv1.2; # Diffie-Hellman parameter for DHE ciphersuites ssl_dhparam /etc/ssl/certs/dhparam.pem; # Enable HSTS (https://developer.mozilla.org/en-US/docs/Security/HTTP_Strict_Transport_Security) add_header Strict-Transport-Security "max-age=63072000; includeSubdomains"; # Enable OCSP stapling (http://blog.mozilla.org/security/2013/07/29/ocsp-stapling-in-firefox) ssl_stapling on; ssl_stapling_verify on; ssl_trusted_certificate /etc/letsencrypt/live/xxx.duckdns.org/fullchain.pem; resolver 8.8.8.8 8.8.4.4 valid=300s; resolver_timeout 5s; location / { set $fixed_destination $http_destination; if ( $http_destination ~* ^https(.*)$ ) { set $fixed_destination http$1; } proxy_set_header Destination $fixed_destination; proxy_set_header Host $http_host; proxy_pass https://192.168.0.254:8080; proxy_set_header Host $host; proxy_redirect http:// https://; proxy_http_version 1.1; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection $connection_upgrade; } }

Configuración de Apache2:

 <IfModule mod_ssl.c> <VirtualHost 192.168.0.254:8080> DocumentRoot /var/www/nextcloud ServerName xxx.duckdns.org CustomLog /var/log/apache2/nc-access.log combined ErrorLog /var/log/apache2/nc-error.log </VirtualHost> <Directory /var/www/nextcloud/> Options +FollowSymlinks AllowOverride All <IfModule mod_dav.c> Dav off </IfModule> LimitRequestBody 0 SSLRenegBufferSize 10486000 </Directory> <IfModule mod_headers.c> Header always set Strict-Transport-Security "max-age=15768000; includeSubDomains" </IfModule> </IfModule>

¡Gracias por adelantado!