I'm using virtual machine locally through yum install nginx Of , The installation is all right , But visit the times 403, So check nginx journal , The default path is nginx Of the same level directory logs, I am here /usr/local/openresty/nginx/logs . Open the log and find the error Permission denied, The details are as follows ：

2021/08/21 22:28:09 [error] 20739#0: *17 access forbidden by rule, client: 192.168.100.1, server: www.gpshopvip.com, request: “GET / HTTP/1.1”, host: “192.168.100.130”
2021/08/21 22:28:09 [error] 20739#0: *17 access forbidden by rule, client: 192.168.100.1, server: www.gpshopvip.com, request: “GET /favicon.ico HTTP/1.1”, host: “192.168.100.130”, referrer: “http://192.168.100.130/”

No authority ？ So I found a lot of information , You can solve this problem through the following four steps . You may just have a problem with the previous configuration , It doesn't have to be all four steps .

One 、 Due to start users and nginx It's caused by the inconsistency of working users

1.1 see nginx Start user of , Found to be nobody, And to use root Starting up

command ：

ps aux | grep “nginx: worker process” | awk’{
    print $1}’

It can also be used directly

ps aux | grep “nginx: worker process”

1.2 take nginx.config Of user Change to be consistent with the starting user ,

command ：vi conf/nginx.conf

Two 、 The lack of index.html perhaps index.php file , In the configuration file index index.html index.htm The file specified in this line .

server {
    
 listen       80;  
 server_name  localhost;  
 index  index.php index.html;  
 root  /data/www/;
}

If in /data/www/ Not below index.php,index.html When , Direct documents , Will be submitted to the 403 forbidden.

3、 ... and 、 Permission problems , If nginx No, web Operation permission of directory , There will be 403 error .

terms of settlement ： modify web Read and write permission of directory , Or put nginx The starting user of the directory is changed to the user of the directory , restart Nginx Can solve

chmod -R 777 /data

chmod -R 777 /data/www/

Four 、SELinux Set to on （enabled） Why .

4.1 View the current selinux The state of

/usr/sbin/sestatus

4.2 take SELINUX=enforcing It is amended as follows SELINUX=disabled state

vi /etc/selinux/config

#SELINUX=enforcing

SELINUX=disabled

4.3 Restart and take effect reboot

reboot