Caldav (failed while connecting to upstream: "fastcgi://127.0.0.1:9000")

Hello, I have some problems with fastcgi and caldav. It worked fine before. I think that the last upgrade of php broke something.

Sorry to hear you’re facing problems :slightly_frowning_face:

help.nextcloud.com is for home/non-enterprise users. If you’re running a business, paid support can be accessed via portal.nextcloud.com where we can ensure your business keeps running smoothly.

In order to help you as quickly as possible, before clicking Create Topic please provide as much of the below as you can. Feel free to use a pastebin service for logs, otherwise either indent short log examples with four spaces:

example

Or for longer, use three backticks above and below the code snippet:

longer
example
here

Some or all of the below information will be requested if it isn’t supplied; for fastest response please provide as much as you can :heart:

Nextcloud version (eg, 18.0.2): 18.0.4
Operating system and version (eg, Ubuntu 20.04): Debian 10
Apache or nginx version (eg, Apache 2.4.25): nginx
PHP version (eg, 7.1): 7.3

The issue you are facing:
I cant synchronize my calendar with caldav.

Is this the first time you’ve seen this error? (Y/N): Y

The output of your Apache/nginx/system log in /var/log/____:

2020/05/04 22:45:13 [error] 31364#31364: *4 connect() failed (111: Connection refused) while connecting to upstream, client: 83.157.33.189, server: myserver.fr, request: "POST /apps/text/session/sync HTTP/2.0", upstream: "fastcgi://127.0.0.1:9000", host: "myserver.fr"
2020/05/04 22:45:32 [error] 31364#31364: *55 connect() failed (111: Connection refused) while connecting to upstream, client: 77.204.244.152, server: myserver.fr, request: "PROPFIND /remote.php/dav/files/user/ HTTP/1.1", upstream: "fastcgi://127.0.0.1:9000", host: "myserver.fr"

Configuration of nginx :

upstream php-handler {
	server 127.0.0.1:9000;
	server unix:/var/run/php/php7.3-fpm.sock;
}

server {
#
	listen 80;
        listen [::]:80;
        server_name myserver.fr;
	
	root /var/www;
	
	#affichage de la page par défaut nginx
#	location /html/ {
#		index index.nginx-debian.html;
#		try_files $uri $uri/ =404;
#	}

	# redirige http vers https
       location /nextcloud/ {
		return 301 https://$server_name:443$request_uri;
	}
}

server {

	listen [::]:443 ssl ipv6only=on; # managed by Certbot
	listen 443 ssl http2; # managed by Certbot
	server_name myserver.fr;
    ssl_certificate /etc/letsencrypt/live/myserver.fr/fullchain.pem; # managed by Certbot
    ssl_certificate_key /etc/letsencrypt/live/myserver.fr/privkey.pem; # managed by Certbot
	include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
	ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot

	# Add headers to serve security related headers
	# Before enabling Strict-Transport-Security headers please read into this
	# topic first.
	add_header Strict-Transport-Security "max-age=15768000; includeSubDomains; → preload;" always;

	#
	# WARNING: Only add the preload option once you read about
	# the consequences in https://hstspreload.org/. This option
	# will add the domain to a hardcoded list that is shipped
	# in all major browsers and getting removed from this list
	# could take several months.

	add_header Referrer-Policy "no-referrer" always;
	add_header X-Content-Type-Options "nosniff" always;
	add_header X-Download-Options "noopen" always;
	add_header X-Frame-Options "SAMEORIGIN" always;
	add_header X-Permitted-Cross-Domain-Policies "none" always;
	add_header X-Robots-Tag "none" always;
	add_header X-XSS-Protection "1; mode=block" always;

	# Remove X-Powered-By, which is an information leak
	fastcgi_hide_header X-Powered-By;

	# Path to the root of your installation
	root /var/www/nextcloud;
	
	location = /robots.txt {
		allow all;
		log_not_found off;
		access_log off;
	}

	# The following 2 rules are only needed for the user_webfinger app.
	# Uncomment it if you're planning to use this app.
	#rewrite ^/.well-known/host-meta /nextcloud/public.php?service=host-meta last;
	#rewrite ^/.well-known/host-meta.json /nextcloud/public.php?service=host-meta-json last;
	# The following rule is only needed for the Social app.
	# Uncomment it if you're planning to use this app.
	#rewrite ^/.well-known/webfinger /nextcloud/public.php?service=webfinger last;
	
	
	#C'est pour caldav et carrdav
	location = /.well-known/carddav {
		return 301 $scheme://$host:$server_port/remote.php/dav;
	}

	location = /.well-known/caldav {
		return 301 $scheme://$host:$server_port/remote.php/dav;
	}

	##Pour lest encrypt
	location /.well-known/acme-challenge { }


	# set max upload size
	client_max_body_size 512M;
	fastcgi_buffers 64 4K;
	
	#types{
	#	application/vnd.oasis.opendocument.text;
	#}

	# Enable gzip but do not remove ETag headers
	gzip on;
	gzip_vary on;
	gzip_comp_level 4;
	gzip_min_length 256;
	gzip_proxied expired no-cache no-store private no_last_modified no_etag auth;
	gzip_types application/atom+xml application/javascript application/jsonapplication/ld+json application/manifest+json application/rss+xml application/vnd.geo+json application/vnd.ms-fontobject application/x-font-ttf application/x-web-app-manifest+json application/xhtml+xml application/xml font/opentype image/bmp image/svg+xml image/x-icon text/cache-manifest text/css text/plain text/vcard text/vnd.rim.location.xloc text/vtt text/x-component text/x-cross-domain-policy;

	# Uncomment if your server is build with the ngx_pagespeed module
	# This module is currently not supported.
	#pagespeed off;
		
	location / {
		rewrite ^ /index.php;
	}

	location ~ ^\/(?:build|tests|config|lib|3rdparty|templates|data)\/ {
		deny all;
	}

	location ~ ^\/(?:\.|autotest|occ|issue|indie|db_|console) {
		deny all;
	}

	location ~ ^\/(?:index|remote|public|cron|core\/ajax\/update|status|ocs\/v[12]|updater\/.+|oc[ms]-provider\/.+)\.php(?:$|\/) {
	
		fastcgi_split_path_info ^(.+?\.php)(\/.*|)$;
		set $path_info $fastcgi_path_info;
		try_files $fastcgi_script_name =404;
		include fastcgi_params;
		fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
		fastcgi_param PATH_INFO $path_info;
		fastcgi_param HTTPS on;

		# Avoid sending the security headers twice
		fastcgi_param modHeadersAvailable true;

		# Enable pretty urls
		fastcgi_param front_controller_active true;
		fastcgi_pass php-handler;
		fastcgi_intercept_errors on;
		fastcgi_request_buffering off;
	}

	location ~ ^\/(?:updater|oc[ms]-provider)(?:$|\/) {
		try_files $uri/ =404;

		index index.php;
	}

	# Adding the cache control header for js, css and map files
	# Make sure it is BELOW the PHP block
	location ~ \.(?:css|js|woff2?|svg|gif|map)$ {
		try_files $uri /index.php$request_uri;
		add_header Cache-Control "public, max-age=15778463";

		# Add headers to serve security related headers (It is intended
		# to have those duplicated to the ones above)
		# Before enabling Strict-Transport-Security headers please read
		# into this topic first.
		add_header Strict-Transport-Security "max-age=15768000;includeSubDomains; preload;" always;
		#
	
		# WARNING: Only add the preload option once you read about
		# the consequences in https://hstspreload.org/. This option
		# will add the domain to a hardcoded list that is shipped
		# in all major browsers and getting removed from this list
		# could take several months.
		
		add_header Referrer-Policy "no-referrer" always;
		add_header X-Content-Type-Options "nosniff" always;
		add_header X-Download-Options "noopen" always;
		add_header X-Frame-Options "SAMEORIGIN" always;
		add_header X-Permitted-Cross-Domain-Policies "none" always;
		add_header X-Robots-Tag "none" always;
		add_header X-XSS-Protection "1; mode=block" always;
		}

	location ~ \.(?:png|html|ttf|ico|jpg|jpeg|bcmap)$ {
		try_files $uri /index.php$request_uri;
	}
} 

Thanks for helping !

I solve the problem. I dont understand why nginx configuration in the official doc of nextcloud doesnt explain this.

The problem is that fastcgi can pass to an unix socket or TCP socket. By default, php is configure to work with unix socket. So you need to add “server unix:/var/run/php/php7.3-fpm.sock;” in php_handler context. But if you want to use TCP socket, you have to add “listen 127.0.0.1:9000” in /etc/php/7.3/fpm/conf.d/www.conf and “server 127.0.0.1:9000;” in php-handler context.

In my case, both are present but “listen 127.0.0.1:9000” was missing. I think that this line had been removed during upgrade of php (I said yes for each edits like a noob).