sous-chefs / nginx

Development repository for the nginx cookbook
https://supermarket.chef.io/cookbooks/nginx
Apache License 2.0
551 stars 810 forks source link

nginx proxy_temp_path default permissions #629

Closed nikhilbhatt closed 10 months ago

nikhilbhatt commented 10 months ago

:speaking_head: Foreword

:ghost: Brief Description

Permission denied error, when nginx trying to access proxy_temp_path folder in /var/cache/nginx/proxy_temp.

if a request is trying to transfer data more than the buffer size limit, it will fail.

why?

Becuase when request size is larger than buffer size, nginx stores the data in var/cache/nginx/proxy_temp but while accessing this folder user (www-data) doesn't have appropriate permissions.

nginx workers are running as www-data user. and the owner of folders in /var/cache/nginx/proxy_temp is root. with permission of 700.

:pancakes: Cookbook version

Version of the cookbook where you are encountering the issue. 12.2.3

:woman_cook: Chef-Infra Version

Version of chef-client in your environment. 18.2.7

:tophat: Platform details

Operating system distribution and release version. Cloud provider if running in the cloud. Ubuntu 20.04

Steps To Reproduce

Already explained above.

:police_car: Expected behavior

A clear and concise description of what you expected to happen.

The folders created in /var/cache/nginx/proxy_temp should have owner set as www-data. similar to previous versions of nginx cookbook.

:heavy_plus_sign: Additional context

Add any other context about the problem here. e.g. related issues or existing pull requests.