Skip to content
ohsudo, Home

Tags

#nodejs

Ghost
Networking

Nginx reverse proxy for Ghost: HTTPS, the url setting and redirect loops

Put Nginx in front of a Ghost blog: a complete HTTPS config, the url setting, X-Forwarded-Proto to avoid redirect loops, upload limits, Docker Compose, and common errors.

Beginner · 3 min read

reverse proxy
Networking

Nginx reverse proxy for Node.js and Express, with HTTPS and WebSockets

Set up Nginx in front of a Node.js or Express app: a complete config with HTTPS and WebSockets, a systemd service, trust proxy for real client IPs, and common errors.

Beginner · 3 min read

jwt expired
Security

JWT "jwt expired" and "invalid signature": how to find out what is wrong with a token

Fix JWT "jwt expired" and "invalid signature": read the exp claim, check clock differences, the secret, HS256 vs RS256 and rotated keys, without turning verification off.

Intermediate · 5 min read

ECONNREFUSED 127.0.0.1:27017
Databases

MongoDB "connect ECONNREFUSED 127.0.0.1:27017": why it refuses, and how to fix it

Fix MongoDB "connect ECONNREFUSED 127.0.0.1:27017" and ::1:27017: start mongod, read exit code 14, check bindIp, IPv6 localhost in Node.js, and Docker service names.

Beginner · 4 min read

npm error EACCES
Linux

npm "EACCES: permission denied": fix it without sudo

Fix npm EACCES permission denied on global installs and in projects: use a version manager or your own prefix, repair root-owned files, and avoid sudo.

Beginner · 3 min read

413 Request Entity Too Large
Networking

Nginx "413 Request Entity Too Large": raise the upload limit in the right place

Fix 413 Request Entity Too Large on uploads: set client_max_body_size in nginx, then the limits of PHP, Node.js, the Kubernetes ingress and any proxy in front.

Beginner · 3 min read

SSL certificate problem: unable to get local issuer certificate
Security

"SSL certificate problem: unable to get local issuer certificate": fix the chain, not the check

Fix "unable to get local issuer certificate" in curl, git, pip, npm and Docker: find the broken link with openssl, then fix the server chain or add the missing CA.

Intermediate · 4 min read

Too many open files
Linux

"Too many open files" on Linux: raise the right limit, or find the leak

Fix "Too many open files" (EMFILE): check a process's real limit in /proc, raise LimitNOFILE for systemd services, and tell a low limit from a file descriptor leak.

Intermediate · 3 min read