Server currently unavailable \ Nginx Reverse Proxy

Graylog Central (peer support)
1

Hi everyone!
I am new with Graylog Server
And for now I have Biggets probmle.
I installed graylog on my VPS (Ubuntu 18.04) all be fine, but when I want to use some loader balance behind graylog as nginx reverse proxy with https, I have error, my graylog server started all ok, but sometimes when I work with my graylog server I have some errors - “The connection has timed out”, “api does not respond” and other…
Where I had mistake???
My craylog server.conf is very simple and default:
Default: 127.0.0.1:9000
http_bind_address = 127.0.0.1:9000
Default: $http_publish_uri
http_external_uri = $http_publish_uri
My nginx reverse proxy config (I want to use https for graylog web-interface) is:
server {
listen 443 ssl http2;
listen [::]:443 ssl http2;
server_name mydomen.com;
ssl on;
ssl_certificate /etc/letsencrypt/live/mydomen.com/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/mydomen.com/privkey.pem;
ssl_session_timeout 1d;
ssl_session_cache shared:MozSSL:10m; # about 40000 sessions
ssl_session_tickets off;

    # intermediate configuration
    ssl_protocols TLSv1.2 TLSv1.3;
    ssl_ciphers ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES2$
    ssl_prefer_server_ciphers off;

    # HSTS (ngx_http_headers_module is required) (63072000 seconds)
    add_header Strict-Transport-Security "max-age=63072000" always;
    location /
    {
      proxy_set_header Host $http_host;
      proxy_set_header X-Forwarded-Host $host;
      proxy_set_header X-Forwarded-Server $host;
      proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
      proxy_set_header X-Graylog-Server-URL https://$server_name/;
      proxy_pass       http://127.0.0.1:9000;
    }
}
server {
    listen 80;
    listen [::]:80;
    server_name mydomen.com;
    return 301 https://$host$request_uri;
}

And This is all right I can login into Graylog via https://mydomen/
But After 5-10 minutes I have thihs error:
Server currently unavailable
We are experiencing problems connecting to the Graylog server running on https://mydomen.xyz/api/. Please verify that the server is healthy and working correctly.
You will be automatically redirected to the previous page once we can connect to the server.
And graylog is shut down, but after 5-10 minutes it is up
When I use graylog without reverse proxy it is ok - works
When I use nginx reverse proxy (http or https) it is not work
Where is the error?
Plz Help

2

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.