Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Did something changed with nginx proxy username authentication? #238

Closed
Nottt opened this issue Oct 30, 2019 · 3 comments
Closed

Did something changed with nginx proxy username authentication? #238

Nottt opened this issue Oct 30, 2019 · 3 comments

Comments

@Nottt
Copy link

Nottt commented Oct 30, 2019

I think that after a apt upgrade on my server, I now get 403 forbidden when accessing the script-server.

Same setup, nothing changed, password and username were saved in browser.

It seems to not be using my username anymore and instead went back to the IP, but it worked for ages...

2019-10-30 16:48:51,852 [identification.INFO] Assigned user_id=IP-9186a420abd443b6 to {'proxied_username': 'admin', 'proxied_ip': 'IP', 'proxied_hostname': 'pinkiepie.optical-server.com', 'ip': '172.18.0.8', 'hostname': 'nginx-proxy.cloudbox'}
2019-10-30 16:48:51,852 [web_server.WARNING] User IP-9186a420abd443b6 is not allowed
2019-10-30 16:48:51,852 [tornado.general.WARNING] 403 GET /index.html (172.18.0.8): Access denied. Please contact system administrator
@bugy
Copy link
Owner

bugy commented Oct 30, 2019

Hi @Nottt, I guess it shouldn't. May be nginx condfiguration was changed? For forwarding headers
Are you referring to #219 ?

If you can send me your auth and access configs, it will be a bit easier to understand the problem

Also please note, that according to your logs, no authentication is enabled and your IP (or your nginx IP) is not whitelisted.

@Nottt
Copy link
Author

Nottt commented Oct 30, 2019

Never mind, my nginx docker was assigning a different IP so the trusted_ips was wrong. Is there a way to make any IP trusted since it's only possible to reach this server from the reverse proxy?

@Nottt Nottt closed this as completed Oct 30, 2019
@bugy
Copy link
Owner

bugy commented Oct 30, 2019

Hi @Nottt, sorry for the late reply. Unfortunately, it's not possible to allow all IPs at the moment

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants