Всем доброго дня!

Есть связка nginx+tomcat+XWiki

Пытаюсь сделать на nginx HTTPS для самой вики.

Конфиг nginx'а

upstream tomcat {
  server wiki.example.com:8080 fail_timeout=0;
  keepalive 64;
}
 
server {
   
  listen 123.45.67.89:80;
  listen [::]:80;
   
  listen 123.45.67.89:443;
  listen [::]:443 ssl;
   
  server_name wiki.example.com;
   
  ssl_certificate /etc/letsencrypt/live/wiki.example.com/fullchain.pem;
  ssl_certificate_key /etc/letsencrypt/live/wiki.example.com/privkey.pem;
  include /etc/letsencrypt/options-ssl-nginx.conf;
  ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem;
   
  # redirect http to https
  if ($scheme != "https" {
    return 301 https://$host$request_uri;
  }
 
  auth_basic "Authentication Required";
  auth_basic_user_file xwiki-access;
 
  location / {
      proxy_set_header Host $http_host;
      proxy_set_header X-Real-IP $remote_addr;
      proxy_set_header X-Forward-For $proxy_add_x_forwarded_for;
      proxy_set_header X-Forwarded-Proto $scheme;
      proxy_set_header X-Scheme $scheme;
      proxy_redirect off;
        if (!-f $request_filename) {
            proxy_pass wiki.example.com:8080;
            break;
        }  
    
 
    proxy_pass tomcat/;
  }
}

конфиг Tomcat

<?xml version="1.0" encoding="UTF-8"?>


<Server port="8005" shutdown="SHUTDOWN">
  <Listener className="org.apache.catalina.startup.VersionLoggerListener" />
  
  
  <Listener className="org.apache.catalina.core.AprLifecycleListener" SSLEngine="on" />
  
  <Listener className="org.apache.catalina.core.JreMemoryLeakPreventionListener" />
  <Listener className="org.apache.catalina.mbeans.GlobalResourcesLifecycleListener" />
  <Listener className="org.apache.catalina.core.ThreadLocalLeakPreventionListener" />

  
  <GlobalNamingResources>
    
    <Resource name="UserDatabase" auth="Container"
              type="org.apache.catalina.UserDatabase"
              description="User database that can be updated and saved"
              factory="org.apache.catalina.users.MemoryUserDatabaseFactory"
              pathname="conf/tomcat-users.xml" />
  </GlobalNamingResources>

  
  <Service name="Catalina">

    
    


    
    <Connector port="8080" protocol="HTTP/1.1"
               connectionTimeout="20000"
	       redirectPort="8443"
	       proxyPort="443" />
    
    
    
    
    
    

    
    


    

    
    <Engine name="Catalina" defaultHost="localhost">
	    <Valve className="org.apache.catalina.valves.RemoteIpValve"
              internalProxies="127\.0\.[0-1]\.1"
	      remoteIpHeader="x-forwarded-for"
	      requestAttributesEnabled="true"
	      protocolHeader="x-forwarded-proto"
	      protocolHeaderHttpsValue="https"/>

      
      

      
      <Realm className="org.apache.catalina.realm.LockOutRealm">
        
        <Realm className="org.apache.catalina.realm.UserDatabaseRealm"
               resourceName="UserDatabase"/>
      </Realm>

      <Host name="localhost"  appBase="webapps"
            unpackWARs="true" autoDeploy="true">

        
        

        
        <Valve className="org.apache.catalina.valves.AccessLogValve" directory="logs"
               prefix="localhost_access_log" suffix=".txt"
               pattern="%h %l %u %t "%r" %s %b" />

      </Host>
    </Engine>
  </Service>
</Server>

При подключении в браузере получаю PR_END_OF_FILE_ERROR

В логах nginx мусор вроде

myip - - [27/Jul/2019:09:12:07 +0300] "\x16\x03\x01\x00\xA9\x01\x00\x00\xA5\x03\x03'\x8A<hX\x96$o:\x813\xB0\xF8\xCFO\x9BY\x00\xE9\xB66#u\x8Fa\xDAR:\xF8\xBB%\xD1\x00\x00\x1C\xCC\xA9\xCC\xA8\xC0+\xC0/\xC0,\xC00\xC0\x13\xC0\x14\x00\x9C\x00\x9D\x00/\x005\x00" 400 173 "-" "-"

Bad Request соответственно.
Что происходит? И куда копать?

tomcat 8, nginx 1.10, debian 9








 , , , ,






URL записи