服务器Nginx try_files与index指令配合不当导致403

location / {
    index index.html index.htm index.php;
}

try_files $uri $uri/ /index.html;

# ❌ 错误配置
location /app/ {
    root /var/www/html;
    try_files $uri $uri/ =404;
    # 缺少 index 指令！
}

# ✅ 正确配置
location /app/ {
    root /var/www/html;
    index index.html;
    try_files $uri $uri/ =404;
}

location / {
    root /var/www/spa;
    try_files $uri $uri/ /index.html;
}

# ✅ 优先回退到SPA入口，避免目录干扰
location / {
    root /var/www/spa;
    index index.html;
    try_files $uri /index.html;  # 移除 $uri/，避免目录匹配
}

# ⚠️ 潜在风险配置
location /docs/ {
    alias /data/documentation/;
    try_files $uri $uri/ /fallback.html;
}

location = /fallback.html {
    root /var/www/html;
    # 如果 /var/www/html/fallback.html 不存在或权限不对 → 403
}

# ⚠️ 逻辑冲突
location / {
    root /var/www/html;
    index index.php index.html;       # PHP优先
    try_files $uri $uri/ /index.html; # 但fallback固定为HTML
}

error_log /var/log/nginx/error.log debug;

# 确认目录是否存在且有执行权限
namei -l /var/www/html/app/dashboard/

# 确认index文件是否存在且可读
ls -la /var/www/html/app/dashboard/index.html

# 确认Web进程用户是否有权限访问
sudo -u www-data test -r /var/www/html/app/dashboard/index.html && echo "OK" || echo "DENIED"

# 查看完整的HTTP响应头，确认403来源
curl -I http://localhost/app/dashboard/

# 对比带尾部斜杠和不带的情况
curl -I http://localhost/app/dashboard
curl -I http://localhost/app/dashboard/

server {
    listen 80;
    server_name example.com;
    root /var/www/html;
    index index.html index.htm;

    location / {
        try_files $uri $uri/ =404;
    }
}

server {
    listen 80;
    server_name spa.example.com;
    root /var/www/spa;
    index index.html;

    location / {
        # SPA不需要 $uri/，避免真实目录干扰
        try_files $uri /index.html;
    }

    # 静态资源缓存
    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
        expires 30d;
        add_header Cache-Control "public, immutable";
    }
}

server {
    listen 80;
    server_name php.example.com;
    root /var/www/php-app/public;
    index index.php index.html;

    location / {
        try_files $uri $uri/ /index.php?$query_string;
    }

    location ~ \.php$ {
        fastcgi_pass unix:/run/php/php-fpm.sock;
        fastcgi_param SCRIPT_FILENAME $realpath_root$fastcgi_script_name;
        include fastcgi_params;
    }
}