nginx在ubuntu 18.04 LTS上运行django时，uwsgi给出502错误

Question

附带说明：该站点使用Python3 manage.py 0.0.0.0:8800

但是，nginx似乎在套接字中面临权限问题，并在浏览器中给出了502坏网关错误。

nginx错误日志显示以下错误：

2020/07/08 21:05:40[crit]3943#3943:*3连接（）到Unix:///home/Ubuntu/deploymenttst/mysite/mysite.sock失败（13：权限被拒绝），连接到上游时，客户端:192.168.12.12，服务器:192.168.12.12，请求：“Get/HTTP/1.1”，上游：“UWSGI://Unix:///home/Ubuntu/deploymenttst/mysite/mysite.sock：”，主机：“192.168.12.400”

配置如下：

>

在项目的settings.py文件中，配置被设置为（除了默认的wsgi之外）：

DEBUG = False
ALLOWED_HOSTS = [ "192.168.12.12" ]
STATIC_URL = '/static/'
STATICFILES_DIRS = (
    os.path.join(BASE_DIR, 'static'),
)
STATIC_ROOT = os.path.join(BASE_DIR, 'staticfiles')

/etc/nginx/sites-available/mysite_nginx.conf中的mysite_nginx.conf文件具有以下配置项：

# MySite_nginx.conf

# the upstream component nginx needs to connect to
upstream django {
    server unix:///home/ubuntu/deploymenttst/MySite/MySite.sock; # for a file socket
    #server 127.0.0.1:8008;
}

# configuration of the server
server {
    # the port your site will be served on
    listen      8400;
    # the domain name it will serve for
    server_name 192.168.12.12; # substitute your machine's IP address or FQDN
    charset     utf-8;

    # max upload size
    client_max_body_size 75M;   # adjust to taste

#    # Django media
    location /media  {
        alias /home/ubuntu/deploymenttst/MySite/media;  # your Django project's media files - amend as required
    }

    location /static {
        #alias /home/ubuntu/deploymenttst/MySite/main/static; # your Django project's static files - amend as required
        #alias /home/ubuntu/deploymenttst/MySite/register/static; # your Django project's static files - amend as required
        alias /home/ubuntu/deploymenttst/MySite/static; # your Django project's static files - amend as required
    }

    # Finally, send all non-media requests to the Django server.
    location / {
        uwsgi_pass  django;
        include     /home/ubuntu/deploymenttst/MySite/uwsgi_params; # the uwsgi_params file you installed
    }
}

它已经sym链接到/etc/nginx/sites-enabled/mysite_nginx.conf。

uwsgi_params文件是在包含以下条目的项目目录中创建的：

uwsgi_param  QUERY_STRING       $query_string;
uwsgi_param  REQUEST_METHOD     $request_method;
uwsgi_param  CONTENT_TYPE       $content_type;
uwsgi_param  CONTENT_LENGTH     $content_length;

uwsgi_param  REQUEST_URI        $request_uri;
uwsgi_param  PATH_INFO          $document_uri;
uwsgi_param  DOCUMENT_ROOT      $document_root;
uwsgi_param  SERVER_PROTOCOL    $server_protocol;
uwsgi_param  REQUEST_SCHEME     $scheme;
uwsgi_param  HTTPS              $https if_not_empty;

uwsgi_param  REMOTE_ADDR        $remote_addr;
uwsgi_param  REMOTE_PORT        $remote_port;
uwsgi_param  SERVER_PORT        $server_port;
uwsgi_param  SERVER_NAME        $server_name;

mysite_uwsgi.ini文件中的内容如下：

[uwsgi]

# Django-related settings
# the base directory (full path)
chdir           = /home/ubuntu/deploymenttst/MySite
# Django's wsgi file
module          = MySite.wsgi
# the virtualenv (full path)
#home            = /home/ubuntu/deploymenttst/MySite/

# process-related settings
# master
master          = true
# maximum number of worker processes
processes       = 20
# the socket (use the full path to be safe
socket          = /home/ubuntu/deploymenttst/MySite/MySite.sock
# ... with appropriate permissions - may be needed
chmod-socket    = 666
uid = www-data
gid = www-data
# clear environment on exit
vacuum          = true

使用Python3 manage.py collectstatic在项目目录中的静态目录中收集了静态文件

为什么我仍然得到坏的网关502错误，其中上游django应用程序无法联系由于权限问题？

Answer 1

通过将项目放置到/tmp目录解决了这个问题。

从www.data用户运行的nginx无法访问内部目录MySite，因此无法访问socket或放置在其中的文件，尽管它被分配给了用户www.data。

现在，我的另一个问题是关于nginx权限问题的原因，尽管向www.data提供了目录的uid和gid，但问题可能是什么？