Hi there, I just completed a fresh install of ISP config on Ubuntu 22.04. When trying to access the web panel or any website which I installed on ws1.cmple.solutions I get the following error: ERR_CONNECTION_TIMED_OUT After installation, I changed the web panel port to 2087 since I'm using Cloudflare, but I am still unable to access it. I am using Oracle Cloud and have ports 8080, 8081 and 2087 open. I followed the ISPConfig Perfect Multiserver setup guide. These are the results of the network test script: Code: ##### SERVER ##### IP-address (as per hostname): ***.***.***.*** [WARN] could not determine server's ip address by ifconfig [INFO] OS version is Ubuntu 22.04.3 LTS [INFO] uptime: 20:02:33 up 8:46, 4 users, load average: 0.01, 0.03, 0.00 [INFO] memory: total used free shared buff/cache available Mem: 952Mi 333Mi 172Mi 0.0Ki 446Mi 463Mi Swap: 4.0Gi 1.3Gi 2.7Gi [INFO] systemd failed services status: UNIT LOAD ACTIVE SUB DESCRIPTION ● nginx.service loaded failed failed A high performance web server and a reverse proxy server ● snap.lxd.activate.service loaded failed failed Service for snap application lxd.activate ● snap.oracle-cloud-agent.oracle-cloud-agent-updater.service loaded failed failed Service for snap application oracle-cloud-agent.oracle-cloud-agent-updater ● snap.oracle-cloud-agent.oracle-cloud-agent.service loaded failed failed Service for snap application oracle-cloud-agent.oracle-cloud-agent LOAD = Reflects whether the unit definition was properly loaded. ACTIVE = The high-level unit activation state, i.e. generalization of SUB. SUB = The low-level unit activation state, values depend on unit type. 4 loaded units listed. [INFO] ISPConfig is installed. ##### ISPCONFIG ##### ISPConfig version is 3.2.11p1 ##### VERSION CHECK ##### [INFO] php (cli) version is 8.1.2-1ubuntu2.14 [INFO] php-cgi (used for cgi php in default vhost!) is version 8.1.2 ##### PORT CHECK ##### [WARN] Port 8080 (ISPConfig) seems NOT to be listening [WARN] Port 8081 (ISPConfig Apps) seems NOT to be listening [WARN] Port 80 (Webserver) seems NOT to be listening [WARN] Port 443 (Webserver SSL) seems NOT to be listening [WARN] Port 143 (IMAP server) seems NOT to be listening [WARN] Port 993 (IMAP server SSL) seems NOT to be listening [WARN] Port 110 (POP3 server) seems NOT to be listening [WARN] Port 995 (POP3 server SSL) seems NOT to be listening [WARN] Port 465 (SMTP server SSL) seems NOT to be listening ##### MAIL SERVER CHECK ##### [WARN] I found no "submission" entry in your postfix master.cf [INFO] this is not critical, but if you want to offer port 587 for smtp connections you have to enable this. [WARN] I found no "smtps" entry in your postfix master.cf [INFO] this is not critical, but if you want to offer SSL for smtp (not TLS) connections you have to enable this. ##### RUNNING SERVER PROCESSES ##### [WARN] I could not determine which web server is running. [INFO] I found the following mail server(s): Postfix (PID 1610) [WARN] I could not determine which pop3 server is running. [WARN] I could not determine which imap server is running. [INFO] I found the following ftp server(s): PureFTP (PID 1079) ##### LISTENING PORTS ##### (only () Local (Address) [anywhere]:3306 (885/mariadbd) [localhost]:953 (743/named) [localhost]:953 (743/named) [localhost]:11211 (709/memcached) [anywhere]:111 (1/init) [anywhere]:21 (1079/pure-ftpd) [anywhere]:22 (761/sshd:) ***.***.***.***:53 (651/systemd-resolve) ***.***.***.***:53 (743/named) ***.***.***.***:53 (743/named) [localhost]:53 (743/named) [localhost]:53 (743/named) [localhost]:25 (1610/master) ##### IPTABLES ##### Chain INPUT (policy ACCEPT) target prot opt source destination f2b-sshd tcp -- [anywhere]/0 [anywhere]/0 multiport dports 22 ACCEPT all -- [anywhere]/0 [anywhere]/0 state RELATED,ESTABLISHED ACCEPT icmp -- [anywhere]/0 [anywhere]/0 ACCEPT all -- [anywhere]/0 [anywhere]/0 ACCEPT udp -- [anywhere]/0 [anywhere]/0 udp spt:123 ACCEPT tcp -- [anywhere]/0 [anywhere]/0 state NEW tcp dpt:22 REJECT all -- [anywhere]/0 [anywhere]/0 reject-with icmp-host-prohibited Chain FORWARD (policy ACCEPT) target prot opt source destination REJECT all -- [anywhere]/0 [anywhere]/0 reject-with icmp-host-prohibited Chain OUTPUT (policy ACCEPT) target prot opt source destination InstanceServices all -- [anywhere]/0 ***.***.***.***/16 Chain InstanceServices (1 references) target prot opt source destination ACCEPT tcp -- [anywhere]/0 ***.***.***.*** owner UID match 0 tcp dpt:3260 /* See the Oracle-Provided Images section in the Oracle Cloud Infrastructure documentation for security impact of modifying or removing t his rule */ ACCEPT tcp -- [anywhere]/0 ***.***.***.***/24 owner UID match 0 tcp dpt:3260 /* See the Oracle-Provided Images section in the Oracle Cloud Infrastructure documentation for security impact of modifying or removing t his rule */ ACCEPT tcp -- [anywhere]/0 ***.***.***.***/24 owner UID match 0 tcp dpt:3260 /* See the Oracle-Provided Images section in the Oracle Cloud Infrastructure documentation for security impact of modifying or removing t his rule */ ACCEPT tcp -- [anywhere]/0 ***.***.***.***/24 owner UID match 0 tcp dpt:3260 /* See the Oracle-Provided Images section in the Oracle Cloud Infrastructure documentation for security impact of modifying or removing t his rule */ ACCEPT tcp -- [anywhere]/0 ***.***.***.*** tcp dpt:80 /* See the Oracle-Provided Images section in the Oracle Cloud Infrastructure documentation for security impact of modifying or removing this rule */ ACCEPT udp -- [anywhere]/0 ***.***.***.*** udp dpt:53 /* See the Oracle-Provided Images section in the Oracle Cloud Infrastructure documentation for security impact of modifying or removing this rule */ ACCEPT tcp -- [anywhere]/0 ***.***.***.*** tcp dpt:53 /* See the Oracle-Provided Images section in the Oracle Cloud Infrastructure documentation for security impact of modifying or removing this rule */ ACCEPT tcp -- [anywhere]/0 ***.***.***.*** owner UID match 0 tcp dpt:80 /* See the Oracle-Provided Images section in the Oracle Cloud Infrastructure documentation for security impact of modifying or removing thi s rule */ ACCEPT tcp -- [anywhere]/0 ***.***.***.*** tcp dpt:80 /* See the Oracle-Provided Images section in the Oracle Cloud Infrastructure documentation for security impact of modifying or removing this rule */ ACCEPT tcp -- [anywhere]/0 ***.***.***.*** tcp dpt:80 /* See the Oracle-Provided Images section in the Oracle Cloud Infrastructure documentation for security impact of modifying or removing this rule */ ACCEPT udp -- [anywhere]/0 ***.***.***.*** udp dpt:67 /* See the Oracle-Provided Images section in the Oracle Cloud Infrastructure documentation for security impact of modifying or removing this rule */ ACCEPT udp -- [anywhere]/0 ***.***.***.*** udp dpt:69 /* See the Oracle-Provided Images section in the Oracle Cloud Infrastructure documentation for security impact of modifying or removing this rule */ ACCEPT udp -- [anywhere]/0 ***.***.***.*** udp dpt:123 /* See the Oracle-Provided Images section in the Oracle Cloud Infrastructure documentation for security impact of modifying or removing this rule */ REJECT tcp -- [anywhere]/0 ***.***.***.***/16 tcp /* See the Oracle-Provided Images section in the Oracle Cloud Infrastructure documentation for security impact of modifying or removing this rule */ reject-with tcp -reset REJECT udp -- [anywhere]/0 ***.***.***.***/16 udp /* See the Oracle-Provided Images section in the Oracle Cloud Infrastructure documentation for security impact of modifying or removing this rule */ reject-with icm p-port-unreachable Chain f2b-sshd (1 references) target prot opt source destination RETURN all -- [anywhere]/0 [anywhere]/0 ##### LET'S ENCRYPT ##### acme.sh is installed in /root/.acme.sh/acme.sh Here is my hosts file: Code: 127.0.0.1 localhost.localdomain localhost # Cluster settings, must be the same on every server 10.0.0.110 ws1.cmple.solutions ws1 10.0.0.225 ws2.cmple.solutions ws2 # The following lines are desirable for IPv6 capable hosts ::1 ip6-localhost ip6-loopback fe00::0 ip6-localnet ff00::0 ip6-mcastprefix ff02::1 ip6-allnodes ff02::2 ip6-allrouters ff02::3 ip6-allhosts 127.0.1.1 ws1 ws1 127.0.1.1 ws1.cmple.solutions ws1
No need to reboot the server but rather check its status if you failed to restart nginx so you may know what causing it to fail.
Code: [INFO] systemd failed services status: UNIT LOAD ACTIVE SUB DESCRIPTION ● nginx.service The common issues report shows nginx is not running. Find out why it does not start or exits instead of running. Try Code: systemctl status nginx.service If you start it manually you may see error messages, Code: systemctl start nginx.service
Hi guys, Thank you for your responses, it seems that Nginx service is indeed not running. Here are the results of me running systemctl status nginx.service Code: root@ws1:/home/ubuntu# systemctl status nginx.service × nginx.service - A high performance web server and a reverse proxy server Loaded: loaded (/lib/systemd/system/nginx.service; enabled; vendor preset: enabled) Active: failed (Result: exit-code) since Mon 2023-11-20 16:39:47 UTC; 6min ago Docs: man:nginx(8) Process: 14544 ExecStartPre=/usr/sbin/nginx -t -q -g daemon on; master_process on; (code=exited, status=1/FAILURE) CPU: 14ms Nov 20 16:39:47 ws1 systemd[1]: Starting A high performance web server and a reverse proxy server... Nov 20 16:39:47 ws1 nginx[14544]: nginx: [emerg] socket() [::]:8081 failed (97: Unknown error) Nov 20 16:39:47 ws1 nginx[14544]: nginx: configuration file /etc/nginx/nginx.conf test failed Nov 20 16:39:47 ws1 systemd[1]: nginx.service: Control process exited, code=exited, status=1/FAILURE Nov 20 16:39:47 ws1 systemd[1]: nginx.service: Failed with result 'exit-code'. Nov 20 16:39:47 ws1 systemd[1]: Failed to start A high performance web server and a reverse proxy server. And here are the results of me running systemctl start nginx.service Code: Job for nginx.service failed because the control process exited with error code. See "systemctl status nginx.service" and "journalctl -xeu nginx.service" for details. journalctl -xeu nginx.service results Code: root@ws1:/home/ubuntu# journalctl -xeu nginx.service ░░ Defined-By: systemd ░░ Support: http://www.ubuntu.com/support ░░ ░░ A start job for unit nginx.service has begun execution. ░░ ░░ The job identifier is 3365. Nov 20 16:39:47 ws1 nginx[14544]: nginx: [emerg] socket() [::]:8081 failed (97: Unknown error) Nov 20 16:39:47 ws1 nginx[14544]: nginx: configuration file /etc/nginx/nginx.conf test failed Nov 20 16:39:47 ws1 systemd[1]: nginx.service: Control process exited, code=exited, status=1/FAILURE ░░ Subject: Unit process exited ░░ Defined-By: systemd ░░ Support: http://www.ubuntu.com/support ░░ ░░ An ExecStartPre= process belonging to unit nginx.service has exited. ░░ ░░ The process' exit code is 'exited' and its exit status is 1. Nov 20 16:39:47 ws1 systemd[1]: nginx.service: Failed with result 'exit-code'. ░░ Subject: Unit failed ░░ Defined-By: systemd ░░ Support: http://www.ubuntu.com/support ░░ ░░ The unit nginx.service has entered the 'failed' state with result 'exit-code'. Nov 20 16:39:47 ws1 systemd[1]: Failed to start A high performance web server and a reverse proxy server. ░░ Subject: A start job for unit nginx.service has failed ░░ Defined-By: systemd ░░ Support: http://www.ubuntu.com/support ░░ ░░ A start job for unit nginx.service has finished with a failure. ░░ ░░ The job identifier is 3365 and the job result is failed. Nov 20 16:48:31 ws1 systemd[1]: Starting A high performance web server and a reverse proxy server... ░░ Subject: A start job for unit nginx.service has begun execution ░░ Defined-By: systemd ░░ Support: http://www.ubuntu.com/support ░░ ░░ A start job for unit nginx.service has begun execution. ░░ ░░ The job identifier is 3455. Nov 20 16:48:31 ws1 nginx[14998]: nginx: [emerg] socket() [::]:8081 failed (97: Unknown error) Nov 20 16:48:31 ws1 nginx[14998]: nginx: configuration file /etc/nginx/nginx.conf test failed Nov 20 16:48:31 ws1 systemd[1]: nginx.service: Control process exited, code=exited, status=1/FAILURE ░░ Subject: Unit process exited ░░ Defined-By: systemd ░░ Support: http://www.ubuntu.com/support ░░ ░░ An ExecStartPre= process belonging to unit nginx.service has exited. ░░ ░░ The process' exit code is 'exited' and its exit status is 1. Nov 20 16:48:31 ws1 systemd[1]: nginx.service: Failed with result 'exit-code'. ░░ Subject: Unit failed ░░ Defined-By: systemd ░░ Support: http://www.ubuntu.com/support ░░ ░░ The unit nginx.service has entered the 'failed' state with result 'exit-code'. Nov 20 16:48:31 ws1 systemd[1]: Failed to start A high performance web server and a reverse proxy server. ░░ Subject: A start job for unit nginx.service has failed ░░ Defined-By: systemd ░░ Support: http://www.ubuntu.com/support ░░ ░░ A start job for unit nginx.service has finished with a failure. ░░ ░░ The job identifier is 3455 and the job result is failed. I appreciate all the assistance.
By editing the config file for altering the port file, you most likely created a file with invalid syntax now which prevents Nginx from starting.
Hi guys, Thank you for the responses, here are the contents of my /etc/nginx/nginx.conf file: Code: ubuntu@ws1:~$ cat /etc/nginx/nginx.conf user www-data; worker_processes auto; pid /run/nginx.pid; include /etc/nginx/modules-enabled/*.conf; events { worker_connections 768; # multi_accept on; } http { map $remote_addr $ip_anonym1 { default 0.0.0; "~(?P<ip>(\d+)\.(\d+)\.(\d+))\.\d+" $ip; "~(?P<ip>[^:]+:[^:]+):" $ip; } map $remote_addr $ip_anonym2 { default .0; "~(?P<ip>(\d+)\.(\d+)\.(\d+))\.\d+" .0; "~(?P<ip>[^:]+:[^:]+):" ::; } map $ip_anonym1$ip_anonym2 $ip_anonymized { default 0.0.0.0; "~(?P<ip>.*)" $ip; } log_format anonymized '$ip_anonymized - $remote_user [$time_local] ' '"$request" $status $body_bytes_sent ' '"$http_referer" "$http_user_agent"'; ## # Basic Settings ## sendfile on; tcp_nopush on; types_hash_max_size 2048; # server_tokens off; # server_names_hash_bucket_size 64; # server_name_in_redirect off; include /etc/nginx/mime.types; default_type application/octet-stream; ## # SSL Settings ## ssl_protocols TLSv1 TLSv1.1 TLSv1.2 TLSv1.3; # Dropping SSLv3, ref: POODLE ssl_prefer_server_ciphers on; ## # Logging Settings ## access_log /var/log/nginx/access.log; error_log /var/log/nginx/error.log; ## # Gzip Settings ## gzip on; # gzip_vary on; # gzip_proxied any; # gzip_comp_level 6; # gzip_buffers 16 8k; # gzip_http_version 1.1; # gzip_types text/plain text/css application/json application/javascript text/xml application/xml application/xml+rss text/javascript; ## # Virtual Host Configs ## include /etc/nginx/conf.d/*.conf; include /etc/nginx/sites-enabled/*; } #mail { # # See sample authentication script at: # # http://wiki.nginx.org/ImapAuthenticateWithApachePhpScript # # # auth_http localhost/auth.php; # # pop3_capabilities "TOP" "USER"; # # imap_capabilities "IMAP4rev1" "UIDPLUS"; # # server { # listen localhost:110; # protocol pop3; # proxy on; # } # # server { # listen localhost:143; # protocol imap; # proxy on; # } #}