Nginx + apache + ssl = 421 misdirected request

sahsanu · July 12, 2025, 11:00pm

I’ve created this PR to fix the Nginx templates (web and mail).

github.com/hestiacp/hestiacp

Fix: 421 error on all web and mail domains after Apache 2.4.64 update

main ← sahsanu:fix-nginx-421

opened 10:58PM - 12 Jul 25 UTC

sahsanu

+22 -0

After updating **Apache2** to version **2.4.64**, all web and mail domains began… returning a **421 error**. This appears to be due to the new version fixing several critical bugs related to SNI (Server Name Indication). Since Nginx connects to Apache2 using the IP address, it does not send the correct Host header. To resolve this issue, I modified all `.stpl` Nginx templates (web and mail) that use the `proxy_pass` directive to include the following directives: ```nginx proxy_ssl_server_name on; proxy_ssl_name $host; ``` Fixes #5057

If you want, you could use this script to fix the templates and rebuild the domains at once.

curl -fsSLm15 https://7j.gg/fixnginx421 | sudo bash -s --