﻿id	summary	reporter	owner	description	type	status	priority	milestone	component	version	resolution	keywords	cc	uname	nginx_version
1895	Serious issue with .site domain extension	xnokia@…		"Hi There,
I have a problem that nginx treat .site domains as one, so if I have multiple vhosts of .site domain for example hello.site and hello2.site and each of them in file with dedicated server_name, one of them will be applied to both. This happens with me only for .site domain extensions. I will share my vhost config here 
                ##########################SSL Start#####################################
                server {
real_ip_header CF-Connecting-IP;

          ##error_log /var/log/nginx/2020.com debug;
#error_log   /dev/null   crit;
#error_log   off;
include    mime.types;
    default_type application/json;
listen 123:443 ssl;


listen 123:80;


          server_name 123123.site;
                keepalive_timeout   30;
ssl_certificate /etc/nginx/ssl/w2020/2019.pem;
ssl_certificate_key /etc/nginx/ssl/w2020/2019.key;
ssl_prefer_server_ciphers on;
ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
ssl_ciphers 'ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-DSS-AES128-GCM-SHA256:kEDH+AESGCM:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA256:DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA:DHE-RSA-AES256-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:AES:CAMELLIA:DES-CBC3-SHA:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!MD5:!PSK:!aECDH:!EDH-DSS-DES-CBC3-SHA:!EDH-RSA-DES-CBC3-SHA:!KRB5-DES-CBC3-SHA';


ssl_session_timeout 1d;
  ssl_session_cache shared:SSL:50m;
    ssl_session_tickets off;

## OCSP Stapling
resolver 8.8.8.8 8.8.4.4;
ssl_stapling off;
ssl_stapling_verify off;
ssl_trusted_certificate /etc/nginx/ssl/2020/2019.pem;
ssl_verify_client off;

                access_log off;
                log_not_found off;
error_page 404 =301 /;
          root /home/1234123/public_html;
#                 add_header X-Cache $upstream_cache_status;


 index index.php;
 charset utf-8;








                if ($request_uri ~* ""^/contacts(-amp)?/|/directory|home.php|/admin"") {
                return 500;
        }





    location / {
try_files $uri $uri/ /index.php?$query_string;
#access_log /var/log/nginx/accessAPI.log addHeaderlog;
    aio threads;
    }





location ~ ^/\.env{
    deny all;
}


        location ~*.*\.(jpg|png|ico|gif|mp4|js|css|svg|woff)$ {
          expires 1M;
        ## No need to bleed constant updates. Send the all shebang in one
        ## fell swoop.
        tcp_nodelay off;
        ## Set the OS file cache.
access_log off;
        open_file_cache max=3000 inactive=60m;
        open_file_cache_valid 5m;
        open_file_cache_min_uses 1;
        open_file_cache_errors off;
          }

          location ~ .*\.php$ {
try_files $uri =404;
#access_log /var/log/nginx/accessAPI.log addHeaderlog;
access_log off;

                fastcgi_param PATH_TRANSLATED $document_root$fastcgi_script_name;
                fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
fastcgi_keep_conn on;
  fastcgi_pass unix:/tmp/mm70.socket;
  fastcgi_index index.php;

include fastcgi_params;
}


          location ~ /\.ht {
          deny all;
          }




        }

                                ##########################SSL Start Finish#####################################
"	defect	closed	minor		other	1.17.x	worksforme			"Linux  5.3.7-1.el7.elrepo.x86_64 #1 SMP Thu Oct 17 18:17:07 EDT 2019 x86_64 x86_64 x86_64 GNU/Linux
"	"nginx version: nginx/1.17.5
built by gcc 4.8.5 20150623 (Red Hat 4.8.5-39) (GCC)
built with OpenSSL 1.1.1c  28 May 2019
TLS SNI support enabled
configure arguments: --with-http_geoip_module --sbin-path=/usr/local/sbin/nginx --conf-path=/etc/nginx/nginx.conf --pid-path=/var/run/nginx.pid --error-log-path=/var/log/nginx/error.log --http-log-path=/var/log/nginx/access.log --with-http_realip_module --http-client-body-temp-path=/tmp/nginx_client --http-proxy-temp-path=/tmp/nginx_proxy --http-fastcgi-temp-path=/tmp/nginx_fastcgi --with-http_ssl_module --with-openssl=/usr/local/src/openssl --with-http_stub_status_module --with-threads --with-file-aio --with-http_v2_module
"
