Half my sites stopped working

[saitoh183]

I had a internet outage and power outage and once i turn my unraid server back on i noticed that NPM had half my sites as offline even if the docker containers were running and i could connect via unraid_IP:Port. Most of the Destinations are setup with the container_name:port as they are all on the same docker network but even if i switch the non working ones to Unraid_IP:Port , they stay offline. I also tried to recreate the entry and it still failed..

Here is what i see in the log of the NPM container:
https://pastebin.com/ZN76t69z

I dont know if it is because of the error or how to correct that error.

Here is what my entries look like

[saitoh183]

After some more digging it seems to be all the sites that use authentik that are causing the issue.
This is the code

location / {
    include conf.d/include/always.conf;
    proxy_set_header Upgrade $http_upgrade;
    proxy_set_header Connection $connection_upgrade;
    include conf.d/include/proxy.conf;

    auth_request /outpost.goauthentik.io/auth/nginx;
    error_page 401 = @goauthentik_proxy_signin;
    auth_request_set $auth_cookie $upstream_http_set_cookie;
    more_set_headers 'Set-Cookie: $auth_cookie';
    auth_request_set $authentik_username $upstream_http_x_authentik_username;
    auth_request_set $authentik_groups $upstream_http_x_authentik_groups;
    auth_request_set $authentik_email $upstream_http_x_authentik_email;
    auth_request_set $authentik_name $upstream_http_x_authentik_name;
    auth_request_set $authentik_uid $upstream_http_x_authentik_uid;
    proxy_set_header X-authentik-username $authentik_username;
    proxy_set_header X-authentik-groups $authentik_groups;
    proxy_set_header X-authentik-email $authentik_email;
    proxy_set_header X-authentik-name $authentik_name;
    proxy_set_header X-authentik-uid $authentik_uid;
    
    # This section should be uncommented when the "Send HTTP Basic authentication" option is enabled in the proxy provider
    auth_request_set $authentik_auth $upstream_http_authorization;
    proxy_set_header Authorization $authentik_auth;
}

location /outpost.goauthentik.io {
    proxy_set_header Upgrade $http_upgrade;
    proxy_set_header Connection $connection_upgrade;
    include conf.d/include/proxy-location.conf;
    proxy_pass http://authentik:9000/outpost.goauthentik.io; # ensure the host of this vserver matches your external URL you've configured in authentik

    proxy_set_header X-Original-URL $scheme://$host$request_uri;
    more_set_headers 'Set-Cookie: $auth_cookie';
    auth_request_set $auth_cookie $upstream_http_set_cookie;
    proxy_pass_request_body off;
    proxy_set_header Content-Length "";
}

location @goauthentik_proxy_signin {
    internal;
    more_set_headers 'Set-Cookie: $auth_cookie';
    return 302 /outpost.goauthentik.io/start?rd=$request_uri;
}

But still dont know how to fix with out breaking the authentik intergration

[saitoh183]

can you try again with the updated template form the readme please?

you mean with this?

port_in_redirect off;
location / {
    # if you want to enable websockets
    #proxy_set_header Upgrade $http_upgrade;
    #proxy_set_header Connection $connection_upgrade;
    include conf.d/include/proxy-headers.conf;
    proxy_pass <your-forward-scheme>://<your-forward-host>:<your forward-port>$request_uri; # you need to adjust this

    auth_request /outpost.goauthentik.io/auth/nginx;
    error_page 401 = @goauthentik_proxy_signin;
    auth_request_set $auth_cookie $upstream_http_set_cookie;
    more_set_headers 'Set-Cookie: $auth_cookie';
    auth_request_set $authentik_username $upstream_http_x_authentik_username;
    auth_request_set $authentik_groups $upstream_http_x_authentik_groups;
    auth_request_set $authentik_entitlements $upstream_http_x_authentik_entitlements;
    auth_request_set $authentik_email $upstream_http_x_authentik_email;
    auth_request_set $authentik_name $upstream_http_x_authentik_name;
    auth_request_set $authentik_uid $upstream_http_x_authentik_uid;
    proxy_set_header X-authentik-username $authentik_username;
    proxy_set_header X-authentik-groups $authentik_groups;
    proxy_set_header X-authentik-entitlements $authentik_entitlements;
    proxy_set_header X-authentik-email $authentik_email;
    proxy_set_header X-authentik-name $authentik_name;
    proxy_set_header X-authentik-uid $authentik_uid;
    
    # This section should be uncommented when the "Send HTTP Basic authentication" option is enabled in the proxy provider
    #auth_request_set $authentik_auth $upstream_http_authorization;
    #proxy_set_header Authorization $authentik_auth;
}

location /outpost.goauthentik.io {
    proxy_set_header Upgrade $http_upgrade;
    proxy_set_header Connection $connection_upgrade;
    include conf.d/include/proxy-headers.conf;

    # When using the embedded outpost, use:
    proxy_pass http://authentik.company:9000/outpost.goauthentik.io;
    # For manual outpost deployments:
    #proxy_pass http://outpost.company:9000$request_uri;

    proxy_set_header X-Original-URL $scheme://$host$request_uri;
    more_set_headers 'Set-Cookie: $auth_cookie';
    auth_request_set $auth_cookie $upstream_http_set_cookie;
    proxy_pass_request_body off;
    proxy_set_header Content-Length "";
}

location @goauthentik_proxy_signin {
    internal;
    more_set_headers 'Set-Cookie: $auth_cookie';
    return 302 /outpost.goauthentik.io/start?rd=$scheme://$host$request_uri;
    # For domain level, use the below error_page to redirect to your authentik server with the full redirect path
    # return 302 https://authentik.company/outpost.goauthentik.io/start?rd=$scheme://$host$request_uri;
}

[Zoey2936]

yes

[saitoh183]

yes

So when i use your above code and just replace URL (http with http://authentik:9000 and https with https://sso.mydomain.com) i get the following

When i enter my username, and press login nothing happens,

The connection error and clicking on the login button seems to generate this in the authentik container log:

{"event":"/outpost.goauthentik.io/auth/nginx","host":"sonarr.mydomain.com","level":"info","logger":"authentik.outpost.proxyv2.application","method":"GET","name":"sonarr","remote":"192.168.13.1","runtime":"0.614","scheme":"http","size":0,"status":200,"timestamp":"2025-01-28T10:23:45-05:00","user":"darkpixx","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36 Edg/132.0.0.0"}
{"auth_via": "unauthenticated", "domain_url": "sonarr.mydomain.com", "event": "/ws/client/", "host": "sonarr.mydomain.com", "level": "info", "logger": "authentik.asgi", "method": "GET", "pid": 47, "remote": "192.168.13.1", "request_id": "7ea86378fb594328910d10fb074142aa", "runtime": 25, "schema_name": "public", "scheme": "https", "status": 200, "timestamp": "2025-01-28T15:23:45.180191", "user": "", "user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36 Edg/132.0.0.0"}

[Zoey2936]

the proxy pass from the / localtion should be the one you set in the first ui tab and the proxy_pass in the /outpost.goauthentik.io location should be authentic

[saitoh183]

the proxy pass from the / localtion should be the one you set in the first ui tab and the proxy_pass in the /outpost.goauthentik.io location should be authentic

as i was re-reading the location...i realized the mistake...Everything works now...thanks !