Otdfbt

I have Magento2 webhop on a VPS server, and I tried install and configure Varnish.

VPS:
- Ubuntu 18.04LTS (digitalocean)
- Nginx 1.14.0
- Mysql 5.7.26
- PHP 7.2
- Magento 2.3

Here is my default Nginx configs, but I chanced some rows:

site-avaliable:

• listen 80 to 8080


• in last block added this and comnnent the nginx.sample conf:

location / 
 proxy_pass http://127.0.0.1;
 proxy_set_header Host $http_host;
 proxy_set_header X-Forwarded-Host $http_host;
 proxy_set_header X-Real-IP $remote_addr;
 proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
 proxy_set_header X-Forwarded-Proto https;
 proxy_set_header X-Forwarded-Port 443;
 

• I modified some changes in varnish config. I used this tutorial: https://www.rosehosting.com/blog/magento-2-with-redis-varnish-and-nginx-as-ssl-termination/
  

[Service]
ExecStart=
ExecStart=/usr/sbin/varnishd -j unix,user=vcache -F -a :80 -T localhost:6082 -f /etc/varnish/default.vcl -S /etc/varnish/secret -s malloc,256m

So, now I have welcome nginx homepage instead of magento shop or varnish welcome page. Can you help for me, how do I configure this configuration?

#

#

#

NGINX conf in etc/nginx/site-avaliable

upstream fastcgi_backend 
 server unix:/var/run/php/php7.2-fpm-magento.sock;


server 
 listen 80;
 server_name magento.xyz www.magento.xyz;

 #server_name magento.xyz;
 set $MAGE_ROOT /opt/magento/public_html;

 include snippets/letsencrypt.conf;
 return 301 https://magento.xyz$request_uri;

 include /opt/magento/public_html/nginx.conf.sample;
# include /opt/magento/public_html/pub/ub-tool/nginx.conf;


server 
 listen 443 ssl http2;
 server_name www.magento.xyz;

 ssl_certificate /etc/letsencrypt/live/magento.xyz/fullchain.pem;
 ssl_certificate_key /etc/letsencrypt/live/magento.xyz/privkey.pem;
 ssl_trusted_certificate /etc/letsencrypt/live/magento.xyz/chain.pem;
 include snippets/ssl.conf;
 include snippets/letsencrypt.conf;

 return 301 https://magento.xyz$request_uri;


server 
 listen 443 ssl http2;
 server_name magento.xyz;

 ssl_certificate /etc/letsencrypt/live/magento.xyz/fullchain.pem;
 ssl_certificate_key /etc/letsencrypt/live/magento.xyz/privkey.pem;
 ssl_trusted_certificate /etc/letsencrypt/live/magento.xyz/chain.pem;
 include snippets/ssl.conf;
 include snippets/letsencrypt.conf;

 set $MAGE_ROOT /opt/magento/public_html;
 #set $MAGE_MODE developer; # or production

 #access_log /var/log/nginx/magento.xyz-access.log;
 #error_log /var/log/nginx/magento.xyz-error.log;

 include /opt/magento/public_html/nginx.conf.sample;
# include /opt/magento/public_html/pub/ub-tool/nginx.conf;

NGINX conf in etc/nginx

user www-data;
worker_processes auto;
pid /run/nginx.pid;
include /etc/nginx/modules-enabled/*.conf;

events 
 worker_connections 768;
 # multi_accept on;


http 

 ##
 # Basic Settings
 ##

 sendfile on;
 tcp_nopush on;
 tcp_nodelay on;
 keepalive_timeout 65;
 types_hash_max_size 2048;
 server_tokens off;

 # server_names_hash_bucket_size 64;
 # server_name_in_redirect off;

 include /etc/nginx/mime.types;
 default_type application/octet-stream;

 ##
 # SSL Settings
 ##

 ssl_protocols TLSv1 TLSv1.1 TLSv1.2; # Dropping SSLv3, ref: POODLE
 ssl_prefer_server_ciphers on;

 ##
 # Logging Settings
 ##

 access_log /var/log/nginx/access.log;
 error_log /var/log/nginx/error.log;

 ##
 # Gzip Settings
 ##

 gzip on;

 # gzip_vary on;
 # gzip_proxied any;
 # gzip_comp_level 6;
 # gzip_buffers 16 8k;
 # gzip_http_version 1.1;
 # gzip_types text/plain text/css application/json application/javascript text/xml application/xml application/xml+rss text/javascript;

 ##
 # Virtual Host Configs
 ##

 include /etc/nginx/conf.d/*.conf;
 include /etc/nginx/sites-enabled/*;



#mail 
# # See sample authentication script at:
# # http://wiki.nginx.org/ImapAuthenticateWithApachePhpScript
# 
# # auth_http localhost/auth.php;
# # pop3_capabilities "TOP" "USER";
# # imap_capabilities "IMAP4rev1" "UIDPLUS";
# 
# server 
# listen localhost:110;
# protocol pop3;
# proxy on;
# 
# 
# server 
# listen localhost:143;
# protocol imap;
# proxy on;
# 
#

NGINX conf in magento root (sample with ub-theme data migration conf include)

## Example configuration:
# upstream fastcgi_backend 
# # use tcp connection
# # server 127.0.0.1:9000;
# # or socket
# server unix:/var/run/php/php7.0-fpm.sock;
# 
# server 
# listen 80;
# server_name mage.dev;
# set $MAGE_ROOT /var/www/magento2;
# include /vagrant/magento2/nginx.conf.sample;
# 
#
## Optional override of deployment mode. We recommend you use the
## command 'bin/magento deploy:mode:set' to switch modes instead.
##
## set $MAGE_MODE default; # or production or developer
##
## If you set MAGE_MODE in server config, you must pass the variable into the
## PHP entry point blocks, which are indicated below. You can pass
## it in using:
##
## fastcgi_param MAGE_MODE $MAGE_MODE;
##
## In production mode, you should uncomment the 'expires' directive in the /static/ location block

root $MAGE_ROOT/pub;

index index.php;
autoindex off;
charset UTF-8;
error_page 404 403 = /errors/404.php;
#add_header "X-UA-Compatible" "IE=Edge";


# PHP entry point for setup application
location ~* ^/setup($|/) 
 root $MAGE_ROOT;
 location ~ ^/setup/index.php 
 fastcgi_pass fastcgi_backend;

 fastcgi_param PHP_FLAG "session.auto_start=off n suhosin.session.cryptua=off";
 fastcgi_param PHP_VALUE "memory_limit=756M n max_execution_time=600";
 fastcgi_read_timeout 600s;
 fastcgi_connect_timeout 600s;

 fastcgi_index index.php;
 fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
 include fastcgi_params;
 

 location ~ ^/setup/(?!pub/). 
 deny all;
 

 location ~ ^/setup/pub/ 
 add_header X-Frame-Options "SAMEORIGIN";
 


# PHP entry point for update application
location ~* ^/update($|/) 
 root $MAGE_ROOT;

 location ~ ^/update/index.php 
 fastcgi_split_path_info ^(/update/index.php)(/.+)$;
 fastcgi_pass fastcgi_backend;
 fastcgi_index index.php;
 fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
 fastcgi_param PATH_INFO $fastcgi_path_info;
 include fastcgi_params;
 

 # Deny everything but index.php
 location ~ ^/update/(?!pub/). 
 deny all;
 

 location ~ ^/update/pub/ 
 add_header X-Frame-Options "SAMEORIGIN";
 


location / 
 try_files $uri $uri/ /index.php$is_args$args;


location /pub/ 

 location ~ ^/pub/media/(downloadable

location /static/ svg

location /media/ xml)$ 
 add_header Cache-Control "no-store";
 add_header X-Frame-Options "SAMEORIGIN";
 expires off;
 try_files $uri $uri/ /get.php$is_args$args;
 
 add_header X-Frame-Options "SAMEORIGIN";


location /media/customer/ 
 deny all;


location /media/downloadable/ 
 deny all;


location /media/import/ 
 deny all;


# Include config location "ub-tool";
include /opt/magento/public_html/pub/ub-tool/nginx.conf;

# PHP entry point for main application
location ~ ^/(index|get|static|errors/report|errors/404|errors/503|health_check).php$ 
 try_files $uri =404;
 fastcgi_pass fastcgi_backend;
 fastcgi_buffers 1024 4k;

 fastcgi_param PHP_FLAG "session.auto_start=off n suhosin.session.cryptua=off";
 fastcgi_param PHP_VALUE "memory_limit=756M n max_execution_time=18000";
 fastcgi_read_timeout 600s;
 fastcgi_connect_timeout 600s;

 fastcgi_index index.php;
 fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
 include fastcgi_params;


gzip on;
gzip_disable "msie6";

gzip_comp_level 6;
gzip_min_length 1100;
gzip_buffers 16 8k;
gzip_proxied any;
gzip_types
 text/plain
 text/css
 text/js
 text/xml
 text/javascript
 application/javascript
 application/x-javascript
 application/json
 application/xml
 application/xml+rss
 image/svg+xml;
gzip_vary on;

# Banned locations (only reached if the earlier PHP entry point regexes don't match)
location ~* (.php$|.htaccess$|.git) 
 deny all;

NGINX conf in ub-theme migration module

#set $yii_bootstrap "index.php";

#charset utf-8;
#
location /ub-tool 
 index index.php;
 try_files $uri $uri/ /index.php?$args;


location ~* ^/ub-tool jpg


#location ~ ^/ub-tool/(protected|framework|themes/w+/views) 
# deny all;
#

#avoid processing of calls to unexisting static files by yii
#location ~ .(js|css|png|jpg|gif|swf|ico|pdf|mov|fla|zip|rar)$ {
#location ~ ^/ub-tool/(js|css|png|jpg|gif|swf|ico|pdf|mov|fla|zip|rar)$ 
# try_files $uri =404;
#

# pass the PHP scripts to FastCGI server listening on 127.0.0.1:9000
#location ~ .php 
# fastcgi_split_path_info ^(.+.php)(.*)$;

 #let yii catch the calls to unexising PHP files
# set $fsn /index.php;
# if (-f $document_root$fastcgi_script_name)
# set $fsn $fastcgi_script_name;
# 

 #fastcgi_pass 127.0.0.1:9000;
 # fastcgi_pass fastcgi_backend;
 #include fastcgi_params;
 # fastcgi_param SCRIPT_FILENAME $document_root$fsn;

 #PATH_INFO and PATH_TRANSLATED can be omitted, but RFC 3875 specifies them for CGI
 # fastcgi_param PATH_INFO $fastcgi_path_info;
 # fastcgi_param PATH_TRANSLATED $document_root$fsn;
#

# prevent nginx from serving dotfiles (.htaccess, .svn, .git, etc.)
#location ~ /. 
# deny all;
# access_log off;
# log_not_found off;
#
#END FOR ub-tool CONFIG