Multiple virtual hosts with nginx about sympa-community.github.io HOT 7 CLOSED

Sorry, no clue about nginx.
However, @racke knows the tool well if I recall correctly.
I'll request a review from him.

from sympa-community.github.io.

On Debian Stretch, /etc/nginx/fastcgi_params contains

fastcgi_param  SERVER_NAME        $server_name;

Can you tell us what /etc/nginx/fastcgi_params contains on your system?

from sympa-community.github.io.

Yes, the $server_name variable is the correct one.

from sympa-community.github.io.

That's right also with RPM. I mean /etc/nginx/conf.d/sympa.conf would contain a line to override definition of SERVERNAME in fastcgi_params.

from sympa-community.github.io.

Side note:

I feel a line

fastcgi_param SERVER_NAME $http_host;

is not a good idea: Client may set arbitrary Host: request field (or no field) and Sympa will trust in it.

$host is determined "in this order of precedence: host name from the request line, or host name from the “Host” request header field, or the server name matching a request" (doc). Additionally, if HTTPS is enabled, nginx gets SNI host name at first (ticket). It looks safer than $http_host for me, but I couldn't be sure.

Another possible way to deteremine virtual hosts using SERVER_NAME (defined as $server_name) is adding multiple server sections. However I feel it is a bit intricate.

from sympa-community.github.io.

Multiple server sections could be an alternative and it wouldn't be that intricate, as you can include the sympa part from a include file (actually I doing it that way). You need other settings depending on the server name in the server section (definitely https://).

from sympa-community.github.io.

I see my idea is not so hopeful. I close this issue. Thanks for suggestions!

from sympa-community.github.io.