Где кроме конфига nginx и php кода может быть зарыта переадресация?

Question

[Дмитрий]

сайт переадресовывает на http версию если рефером указана https версия

GET /articles HTTP/1.1
Host: rt.ru
Connection: keep-alive
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.189 Safari/537.36 Vivaldi/1.95.1077.60
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8
Referer: https://rt.ru/articles/
Accept-Encoding: gzip, deflate, br
Accept-Language: ru-RU,ru;q=0.9,en-US;q=0.8,en;q=0.7
Cookie: rdnt=1; b=b; PHPSESSID=bplmforfu756apkt65ai2vpa91; _ym_uid=15232512571067320353; rdnt=1; b=b; caltat=99f95242a5944010a9e2a172651396cd; phpbb3_nb9q6_u=6003; _ym_isad=2; phpbb3_nb9q6_k=729e2e8109b4d342; phpbb3_nb9q6_sid=2fb03bafbc5e522a0ff69fdea6a2be11; __lx205948_load_cnt=13; __lx205948_load_tmr=1524246959733; __lx205948_load_tmr_pre=1524285228203; last_visit=1524276304609::1524287104609


HTTP/1.1 301 Moved Permanently
Server: nginx/1.6.0
Date: Sat, 21 Apr 2018 04:00:34 GMT
Content-Type: text/html; charset=iso-8859-1
Content-Length: 236
Connection: keep-alive
Location: http://rt.ru/articles/

GET /articles/ HTTP/1.1
Host: rt.ru
Connection: keep-alive
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.189 Safari/537.36 Vivaldi/1.95.1077.60
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8
Accept-Encoding: gzip, deflate, br
Accept-Language: ru-RU,ru;q=0.9,en-US;q=0.8,en;q=0.7
Cookie: rdnt=1; b=b; PHPSESSID=bplmforfu756apkt65ai2vpa91; _ym_uid=15232512571067320353; rdnt=1; b=b; caltat=99f95242a5944010a9e2a172651396cd; phpbb3_nb9q6_u=6003; _ym_isad=2; phpbb3_nb9q6_k=729e2e8109b4d342; phpbb3_nb9q6_sid=2fb03bafbc5e522a0ff69fdea6a2be11; __lx205948_load_cnt=13; __lx205948_load_tmr=1524246959733; __lx205948_load_tmr_pre=1524285228203; last_visit=1524276322132::1524287122132

HTTP/1.1 200 OK
Server: nginx/1.6.0
Date: Sat, 21 Apr 2018 04:02:21 GMT
Content-Type: text/html; charset=cp1251
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.4.30
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache

переадресации нет ни в коде php ни в конфиге nginx

Comments

[Arman]

php-fpm? или за nginx стоит апач? тогда htaccess?

[Дмитрий]

Arik, за nginx апач
но апач вообще не в курсе о https
в htaccess тоже ничего

# -FrontPage-

IndexIgnore .htaccess */.??* *~ *# */HEADER* */README* */_vti*

<Limit GET POST>
#The next line modified by DenyIP
order allow,deny
#The next line modified by DenyIP
#deny from all
allow from all
deny from 193.33.179.143
deny from 193.200.150.
</Limit>
<Limit PUT DELETE>
order deny,allow
deny from all
</Limit>
#AuthName www.rt.ru
#AuthUserFile /var/www/rt1/data/www/rt.ru/_vti_pvt/service.pwd
#AuthGroupFile /var/www/rt1/data/www/rt.ru/_vti_pvt/service.grp
ErrorDocument 404 /404.shtml
ErrorDocument 403 /403.shtml
ErrorDocument 400 /400.shtml
ErrorDocument 500 /500.shtml
ErrorDocument 401 /401.shtml
#AddType application/x-httpd-php5 .php


#order allow deny
#deny from all
#allow from 213.170.94.74

[Arman]

Дмитрий, в /articles нет своего htaccess? есть ли возможность запустить phpinfo в пути /articles ? нужно глянуть что под php.net/manual/ru/ini.core.php#ini.auto-prepend-file может там какой еще скрипт запускается

[Дмитрий]

там только index.php со словом тест без кода
сейчас запущу

[Дмитрий]

no value

[Дмитрий]

конфиг nginx
может я и админы хостинга чего не заметили
nginx.conf

#user  nobody;
worker_processes  4;

#error_log  logs/error.log;
#error_log  logs/error.log  notice;
#error_log  logs/error.log  info;

#pid        logs/nginx.pid;


events {
    worker_connections  1024;
}


http {
    limit_conn_zone $binary_remote_addr zone=addr:10m;
    limit_conn addr 3;
    include       mime.types;
    default_type  application/octet-stream;

    #log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
    #                  '$status $body_bytes_sent "$http_referer" '
    #                  '"$http_user_agent" "$http_x_forwarded_for"';

    #access_log  logs/access.log  main;

    sendfile        on;
    #tcp_nopush     on;

    #keepalive_timeout  0;
    keepalive_timeout  65;

    #gzip  on;



    # another virtual host using mix of IP-, name-, and port-based configuration
    #
    #server {
    #    listen       8000;
    #    listen       somename:8080;
    #    server_name  somename  alias  another.alias;

    #    location / {
    #        root   html;
    #        index  index.html index.htm;
    #    }
    #}
include /home/r1/data/www/rt.ru/nginx/*;

    # HTTPS server
    #
    #server {
    #    listen       443 ssl;
    #    server_name  localhost;

    #    ssl_certificate      cert.pem;
    #    ssl_certificate_key  cert.key;

    #    ssl_session_cache    shared:SSL:1m;
    #    ssl_session_timeout  5m;

    #    ssl_ciphers  HIGH:!aNULL:!MD5;
    #    ssl_prefer_server_ciphers  on;

    #    location / {
    #        root   html;
    #        index  index.html index.htm;
    #    }
    #}

	include /usr/local/ispmgr/etc/nginx.domain;
	client_max_body_size 16M;
	log_format isp '$bytes_sent $request_length';
}

rt.inc

server {
		server_name rt.ru superrt.ru www.rt.ru;
		listen 89.108.75.196;
#		listen 89.108.75.196:443 ssl;
		charset CP1251;

		disable_symlinks if_not_owner from=$root_path/$subdomain;
		index index.php index.shtml;
		set $root_path /home/r1/data/www/rt.ru;
		set $subdomain "";
		if ($host ~* ^((.*).rt.ru)$) {
			set $subdomain $2;
		}
		location ~* ^.+\.(jpg|jpeg|gif|png|svg|js|css|mp3|ogg|mpe?g|avi|zip|gz|bz2?|rar|swf)$ {
			root $root_path/$subdomain;
#			access_log /home/nginx-logs/r1 isp;
			access_log /home/httpd-logs/rt.ru.access.log ;
			error_page 404 = @fallback;
		}
		location / {
			proxy_pass http://89.108.75.196:81;
			proxy_redirect http://89.108.75.196:81/ /;
			proxy_set_header Host $host;
			proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
			proxy_set_header X-Forwarded-Proto $scheme;
			proxy_set_header X-Real-IP $remote_addr;
		}
		location ~* ^/(webstat|awstats|webmail|myadmin|pgadmin)/ {
			proxy_pass http://89.108.75.196:81;
			proxy_redirect http://89.108.75.196:81/ /;
			proxy_set_header Host $host;
			proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
			proxy_set_header X-Forwarded-Proto $scheme;
			proxy_set_header X-Real-IP $remote_addr;
		}
		location @fallback {
			proxy_pass http://89.108.75.196:81;
			proxy_set_header Host $host;
			proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
			proxy_set_header X-Forwarded-Proto $scheme;
			proxy_set_header X-Real-IP $remote_addr;
		}
	
		include /usr/local/ispmgr/etc/nginx.inc;
#		ssl_certificate /home/httpd-cert/r1/new_rt.ru.chained.crt;
#		ssl_certificate_key /home/httpd-cert/r1/new_rt.ru.key;
		error_page 404 = http://rt.ru/404/;
	}

rtssl.inc

server {
		server_name rt.ru superrt.ru www.rt.ru;
#		listen 89.108.75.196;
		listen 89.108.75.196:443 ssl;
		charset CP1251;

		disable_symlinks if_not_owner from=$root_path/$subdomain;
		index index.php index.shtml;
		set $root_path /home/r1/data/www/rt.ru;
		set $subdomain "";
		if ($host ~* ^((.*).rt.ru)$) {
			set $subdomain $2;
		}

        if ( $scheme = "http" ) {
	      rewrite ^/(.*)$	https://$host/$1 permanent;
        }
		location ~* ^.+\.(jpg|jpeg|gif|png|svg|js|css|mp3|ogg|mpe?g|avi|zip|gz|bz2?|rar|swf)$ {
			root $root_path/$subdomain;
#			access_log /home/nginx-logs/r1 isp;
			access_log /home/httpd-logs/rt.ru.access.log ;
			error_page 404 = @fallback;
		}
		location / {
			proxy_pass http://89.108.75.196:81;
			proxy_redirect http://89.108.75.196:81/ https://rt.ru/;
			proxy_set_header Host $host;
			proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
			proxy_set_header X-Forwarded-Proto $scheme;
			proxy_set_header X-Real-IP $remote_addr;
		}
		location ~* ^/(webstat|awstats|webmail|myadmin|pgadmin)/ {
			proxy_pass http://89.108.75.196:81;
			proxy_redirect http://89.108.75.196:81/ /;
			proxy_set_header Host $host;
			proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
			proxy_set_header X-Forwarded-Proto $scheme;
			proxy_set_header X-Real-IP $remote_addr;
		}
		location @fallback {
			proxy_pass http://89.108.75.196:81;
			proxy_set_header Host $host;
			proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
			proxy_set_header X-Forwarded-Proto $scheme;
			proxy_set_header X-Real-IP $remote_addr;
		}
	
		include /usr/local/ispmgr/etc/nginx.inc;
		ssl_certificate /home/httpd-cert/r1/new_rt.ru.chained.crt;
		ssl_certificate_key /home/httpd-cert/r1/new_rt.ru.key;
		error_page 404 = http://rt.ru/404/;
	}

[Олег]

меня смущает, что dns для домена другой ип отдает.

[Дмитрий]

домен в конфиге я поменял - требование заказчика