bbaronas

The bucket was already created. I tested using the bucket.

I figured it out. It turns out S3 now has four default public access settings on buckets that are enabled by default. These settings prevent user even with put permissions to make items public by default.

You have to disable those defaults, then the tests work.

Hi,

Nginx was built from a pre-built (Ubuntu) package: 1.13.10-1~xenial

For the site in question, https://www.kollabria.com, my url permalinks are currently set as plain (any other setting triggers the 404 errors). It is the only way at present to keep my site up.

My nginx.conf:

user www-data;
worker_processes auto;
error_log /var/log/nginx/error.log;
pid /run/nginx.pid;

# Load dynamic modules. See /usr/share/nginx/README.dynamic.
include /usr/share/nginx/modules/*.conf;

events {
    worker_connections 1024;
}

http {
    log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
                      '$status $body_bytes_sent "$http_referer" '
                      '"$http_user_agent" "$http_x_forwarded_for"';

    access_log  /var/log/nginx/access.log  main;

    sendfile            on;
    tcp_nopush          on;
    tcp_nodelay         on;
    keepalive_timeout   65;
    types_hash_max_size 2048;
    fastcgi_buffers 8 128k;
    fastcgi_buffer_size 256k;
    fastcgi_connect_timeout 800;
    fastcgi_send_timeout 800;
    fastcgi_read_timeout 800;

    include             /etc/nginx/mime.types;
    default_type        application/octet-stream;
    client_max_body_size 150M;

    # Settings for a TLS enabled server.
    # Defaults for Kollabria certificates using acme.sh
    ssl_protocols TLSv1.2 TLSv1.1 TLSv1; # Dropping SSLv3, ref: POODLE
    ssl_prefer_server_ciphers on;
    ssl_ciphers 'ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256';
    ssl_stapling on;
    ssl_stapling_verify on;
    resolver 8.8.8.8 8.8.4.4 valid=86400;
    ssl_dhparam /etc/ssl/dhparam.pem;
    ssl_trusted_certificate /etc/ssl/certs/acme_ca.pem;
    ssl_session_cache shared:SSL:20m;
    ssl_session_timeout 10m;
    ssl_session_tickets off;
    ssl_ecdh_curve secp384r1;
    add_header Strict-Transport-Security "max-age=31536000; includeSubdomains";
    add_header X-Frame-Options DENY;
    add_header X-Content-Type-Options nosniff;

    ##
    # fastcgi_cache_path Info
    ##

    fastcgi_cache_path /var/run/techai-cache levels=1:2 keys_zone=TECHINFO:100m inactive=60m;
    fastcgi_cache_path /var/run/kollabria-cache levels=1:2 keys_zone=KOLLABRIA:100m inactive=60m;
    fastcgi_cache_path /var/run/bithoop-cache levels=1:2 keys_zone=BITHOOP:100m inactive=60m;
    fastcgi_cache_key "$scheme$request_method$host$request_uri";

    # Load modular configuration files from the /etc/nginx/conf.d directory.
    # See http://nginx.org/en/docs/ngx_core_module.html#include
    # for more information.
    include /etc/nginx/conf.d/*.conf;
    include /etc/nginx/enabled/*;
}

My webserver conf:

server  {
        server_name www.kollabria.com kollabria.com;
        listen 80 default;
        listen [::]:80 default;
        include /etc/nginx/snippets/letsencrypt.conf;
        return 301 https://$server_name$request_uri;
}

server {
        server_name www.kollabria.com kollabria.com;
        listen 443 ssl http2 default;
        listen [::]:443 ssl http2 default ipv6only=on;
        # gzip off;
        ssl_certificate /etc/ssl/certs/kollabria.com.pem;
        ssl_certificate_key /etc/ssl/private/kollabria.com.key;
        server_name_in_redirect off;
        # server_tokens off;

        # access_log /var/log/nginx/kollabriawp-access.log main buffer=16k;
        access_log off;
        error_log /var/log/nginx/kollabriawp-error.log warn;
        charset en_us.UTF-8;
        root /var/www/kollabriawp;
        index index.php index.html index.htm;
        include /var/www/kollabriawp/nginx.conf;
        set $skip_cache 0;

    # POST requests and URLs with a query string should always go to PHP
    if ($request_method = POST) {
        set $skip_cache 1;
    }

    if ($query_string != "") {
        set $skip_cache 1;
    }

    # Don't cache URIs containing the following segments
    if ($request_uri ~* "/wp-admin/|/xmlrpc.php|wp-.*.php|/feed/|index.php
                         |sitemap(_index)?.xml") {
        set $skip_cache 1;
    }

    # Don't use the cache for logged-in users or recent commenters
    if ($http_cookie ~* "comment_author|wordpress_[a-f0-9]+|wp-postpass
        |wordpress_no_cache|wordpress_logged_in") {
        set $skip_cache 1;
    }

        # Support Clean (aka Search Engine Friendly) URLs
        location / {
                try_files /wp-content/w3tc/pgcache/$cache_uri/_index.html $uri $uri/ /index.php$is_args$args;
                # autoindex off;

        include /etc/nginx/snippets/letsencrypt.conf;

        # deny running scripts inside writable directories
        # location ~* /(images|cache|media|logs|tmp)/.*\.(php|pl|py|jsp|asp|sh|cgi)$ {
        location ~* /(cache|media|logs|tmp)/.*\.(php|pl|py|jsp|asp|sh|cgi)$ {
                return 403;
                error_page 403 /403_error.html;
        }

        location ~ \.php$ {
        try_files $uri /index.php;
        fastcgi_split_path_info ^(.+\.php)(/.+)$;
        #  NOTE: You should have "cgi.fix_pathinfo = 0;" in php.ini
        fastcgi_pass unix:/var/run/php/www.sock;
        # fastcgi_pass backend;
        # fastcgi_index index.php;
        include fastcgi_params;
        fastcgi_cache_bypass $skip_cache;
        fastcgi_no_cache $skip_cache;
        fastcgi_cache KOLLABRIA;
        fastcgi_cache_valid  60m;
        fastcgi_send_timeout 300;
        fastcgi_read_timeout 300;
        fastcgi_keep_conn on;
        fastcgi_buffers 32 32k;
        fastcgi_buffer_size 32k;
        }

        # location ~ /purge(/.*) {
        #  fastcgi_cache_purge KOLLABRIA  "$scheme$request_method$host$1";
        #  }

         location = /favicon.ico {
                log_not_found off;
                access_log off;
        }

        location = /robots.txt {
                log_not_found off;
                access_log off;
                allow all;
        }

        # caching of files

        location ~ (.*).js {
                try_files $uri /index.php?$args;
        }

        location ~ (.*).gif {
                try_files $uri /index.php?$args;
        }

        location ~* ^.+\.(ogg|ogv|svg|svgz|eot|otf|woff|mp4|ttf|css|rss|atom|js|jpg|jpeg|gif|png|ico|zip|tgz|gz|rar|bz2|doc|xls|exe|ppt|tar|mid|midi|wav|bmp|rtf)$ {
        access_log off;
        log_not_found off;
        expires max;
    }
        #location ~* \.(ico|pdf|flv)$ {
        #        expires 1y;
        #}

        #location ~* \.(css|gif|ico|jpeg|jpg|js|png)$ {
        #        expires max;
        #       log_not_found off;
        #}

        location ~* /(?:uploads|files)/.*\.php$ {
                deny all;
        }

        location ~ ^/\.user\.ini {
                deny all;
        }

        location ~ /\. {
                deny all;
                access_log off;
                log_not_found off;
        }

        #W3 TOTAL CACHE CHECK
        set $cache_uri $request_uri;

        # POST requests and urls with a query string should always go to PHP
        if ($request_method = POST) {
                set $cache_uri 'null cache';
        }
        if ($query_string != "") {
                set $cache_uri 'null cache';
        }

        # Don't cache uris containing the following segments
        if ($request_uri ~* "(/wp-admin/|/xmlrpc.php|/wp-(app|cron|login|register|mail).php|wp-.*.php|/feed/|index.php|wp-comments-popup.php|wp-links-opml.php|wp-locations.php|sitemap(_index)?.xml|[a-z0-9_-]+-sitemap([0-9]+)?.xml)") {
                set $cache_uri 'null cache';
        }

        # Don't use the cache for logged in users or recent commenters
        if ($http_cookie ~* "comment_author|wordpress_[a-f0-9]+|wp-postpass|wordpress_logged_in") {
                set $cache_uri 'null cache';
        }

        #Yoast SEO Sitemaps
        location ~ ([^/]*)sitemap(.*).x(m|s)l$ {
        ## this redirects sitemap.xml to /sitemap_index.xml
        rewrite ^/sitemap.xml$ /sitemap_index.xml permanent;
        ## this makes the XML sitemaps work
        rewrite ^/([a-z]+)?-?sitemap.xsl$ /index.php?xsl=$1 last;
        rewrite ^/sitemap_index.xml$ /index.php?sitemap=1 last;
        rewrite ^/([^/]+?)-sitemap([0-9]+)?.xml$ /index.php?sitemap=$1&sitemap_n=$2 last;
        ## The following lines are optional for the premium extensions
        ## News SEO
        rewrite ^/news-sitemap.xml$ /index.php?sitemap=wpseo_news last;
        ## Local SEO
        rewrite ^/locations.kml$ /index.php?sitemap=wpseo_local_kml last;
        rewrite ^/geo-sitemap.xml$ /index.php?sitemap=wpseo_local last;
        ## Video SEO
        rewrite ^/video-sitemap.xsl$ /index.php?xsl=video last;
        }
}

Please help me uncover what I may be missing.

Thank you.