Varnish 6 + Apache 2.4 Joomla frontend 403 error

[petron]

Hi,

my config is Vestacp nginx + Varnish :80 + Apache 2.4 :8080 and :8443

Since I upgraded debian wheezy to Stretch Varnish 6.0.1 not working. When Apache 2.2 was installed, everything was fine but in debian stretch only Apache 2.4 supported. I know there are a few changes in apache2.4 configuration, I read almost everything about modules, compat_access, the new syntax, directives, Required all granted, and so on.
I can't get it work.

Does anyone have any idea which config file should I change?
/home/admin/conf/web/domain.apache.conf
/etc/apache2/apache2.conf
/etc/apache2/site-available/...
/etc/apache2/site-enabled/...

which one should I check?
.htaccess? in the public_html folder?

which error log could help?

I am lost in those config files.
This is a Joomla!3.9 website.
administrator backend works fine but only on port 80, Varnish pass it through to the backend Apache server.

Only the frontend not working, all html page get 403 error.
Images are 200 OK. They are in /home/admin/conf/web/domain.net/public_html/images folder

Only the normal webpages and xml sitemap getting 403 error or blank page.

I think Varnish does not have any access rights to the backend :8080 to fetch the content.

Where should I give access to varnish? .htaccess? or which apache2.conf?
I am using this Varnish default config file, the 2nd one which is for Varnish 4.x or higher
https://gist.github.com/fevangelou/84d2ce05896cab5f730a
the only change i made is I replaced 127.0.0.1 to my server's IP address.

Code: Select all

backend default {
    .host = "127.0.0.1"; # UPDATE this only if the web server is not on the same machine
    .port = "8080";      # UPDATE 8080 with your web server's (internal) port
}

changed to

Code: Select all

backend default {
    .host = "123.123.123.123"; # UPDATE this only if the web server is not on the same machine
    .port = "8080";      # UPDATE 8080 with your web server's (internal) port
}

Thank you!

[skamasle]

This configuration is not supported by vestacp

In any case, you say you have nginx + varnish 80

But, in what port run NGINX ?

But As I say, we cant help you with this, because you install varnish and customize your server by your hand.

[petron]

Sorry for the late reply,
something very strange is happening on my server, because it sometimes fixes itself, and the site is up and runnnig, than a few days later it is doing the 403 error again.
I do not know what is going on, and what is breaking the config, and what is fixing it. I am totally confused about it.

Code: Select all

root@www:~# netstat -tlpn | grep nginx
tcp        0      0 server_ip:8082     0.0.0.0:*               LISTEN      20457/nginx: master
tcp        0      0 0.0.0.0:8083            0.0.0.0:*               LISTEN      600/nginx: master p
tcp        0      0 127.0.0.1:8084          0.0.0.0:*               LISTEN      20457/nginx: master