Unable to access InvenTree through existing Caddy reverse proxy #6794
Replies: 2 comments 2 replies
-
|
If you are redirecting to the Caddyfile at Your |
Beta Was this translation helpful? Give feedback.
-
|
So you should change your internal caddyfile as follows: |
Beta Was this translation helpful? Give feedback.
-
|
Thank you for your reply, and sorry for the delay in responding - I spent some more time trying to get it work, without success. By implementing the changes you suggested I end up with a redirect loop: Just posting the relevant snippets from the configuration files in case I made any changes to them I forgot about. InvenTree Caddyfile:InvenTree .env# Site URL - update this to match your host
INVENTREE_SITE_URL="https://inventree.example.com"
INVENTREE_TRUSTED_ORIGINS=["https://inventree.example.com","http://inventree.local", "http://192.168.0.26"]
INVENTREE_CORS_ORIGIN_ALLOW_ALL=True
INVENTREE_USE_X_FORWARDED_HOST=True
INVENTREE_USE_X_FORWARDED_PORT=TrueReverse proxy CaddyfileNow if I remove the external domain from the InvenTree Caddyfile... ... I get these log entries: I'm at a complete loss - I just can't seem to make any changes that point me in the right direction. |
Beta Was this translation helpful? Give feedback.
-
|
@chris-thorn really getting into the limits of my knowledge of proxy configuration. Maybe you need to rewrite the host headers on your top-level proxy before sending through to the lower one? Maybe there is someone else who can comment with better insight. If there is something we can do to improve the default |
Beta Was this translation helpful? Give feedback.
-
I have a Caddy reverse proxy server running in a Docker container which forwards requests to other hosts on the network so I can access all my services through different subdomains, e.g. https://service1.example.com, https://service2.example.com. Ports 80 and 443 are forwarded to this host, which has IP address 192.168.0.20.
On another physical host I am running InvenTree using Docker Compose. The IP address of this host is 192.168.0.26. I had been running 0.13.6 without issue using the original nginx configuration, and this was accessible at https://inventree.example.com. On upgrading to 0.14.3 I decided to switch to the new Caddy configuration, but now when I visit https://inventree.example.com all I get is a blank page.
I have confirmed that I can access InvenTree at the IP address of the host on which it is running - in this case http://192.168.0.26. I have also confirmed that I can access this from the reverse proxy host by entering a shell in the reverse proxy Caddy container and running the command
curl -I http://192.168.0.26/accounts/login/?next=/which returns status code 200 "OK". (I have also checked it without the-Iflag and it returns the correct HTML from the login page.) So I am confident that InvenTree is running and accessible.Looking at the Caddy logs on the reverse proxy, a request to https://inventree.example.com generates two entries:
{"level":"info","ts":"2024/03/20 22:29:37.561","logger":"http.log.access.log4","msg":"handled request","request":{"remote_ip":"192.168.0.1","remote_port":"30097","client_ip":"192.168.0.1","proto":"HTTP/2.0","method":"GET","host":"inventree.example.com","uri":"/","headers":{"Upgrade-Insecure-Requests":["1"],"Sec-Fetch-User":["?1"],"Accept-Language":["en-GB,en;q=0.9"],"Cookie":[],"Sec-Ch-Ua":["\"Chromium\";v=\"122\", \"Not(A:Brand\";v=\"24\", \"Google Chrome\";v=\"122\""],"Sec-Ch-Ua-Mobile":["?0"],"Accept":["text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7"],"Pragma":["no-cache"],"User-Agent":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"],"Sec-Fetch-Dest":["document"],"Sec-Ch-Ua-Platform":["\"Windows\""],"Sec-Fetch-Mode":["navigate"],"Accept-Encoding":["gzip, deflate, br"],"Cache-Control":["no-cache"],"Sec-Fetch-Site":["none"]},"tls":{"resumed":false,"version":772,"cipher_suite":4867,"proto":"h2","server_name":"inventree.example.com"}},"bytes_read":0,"user_id":"","duration":0.002573371,"size":0,"status":200,"resp_headers":{"Server":["Caddy","Caddy"],"Alt-Svc":["h3=\":443\"; ma=2592000"],"Date":["Wed, 20 Mar 2024 22:29:37 GMT"],"Content-Length":["0"]}} {"level":"info","ts":"2024/03/20 22:29:37.726","logger":"http.log.access.log4","msg":"handled request","request":{"remote_ip":"192.168.0.1","remote_port":"30097","client_ip":"192.168.0.1","proto":"HTTP/2.0","method":"GET","host":"inventree.example.com","uri":"/favicon.ico","headers":{"Sec-Ch-Ua":["\"Chromium\";v=\"122\", \"Not(A:Brand\";v=\"24\", \"Google Chrome\";v=\"122\""],"Sec-Ch-Ua-Mobile":["?0"],"Accept":["image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8"],"Pragma":["no-cache"],"Cache-Control":["no-cache"],"Sec-Ch-Ua-Platform":["\"Windows\""],"Sec-Fetch-Dest":["image"],"Referer":["https://inventree.example.com/"],"Accept-Language":["en-GB,en;q=0.9"],"Cookie":[],"User-Agent":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"],"Sec-Fetch-Site":["same-origin"],"Sec-Fetch-Mode":["no-cors"],"Accept-Encoding":["gzip, deflate, br"]},"tls":{"resumed":false,"version":772,"cipher_suite":4867,"proto":"h2","server_name":"inventree.example.com"}},"bytes_read":0,"user_id":"","duration":0.003019805,"size":0,"status":200,"resp_headers":{"Alt-Svc":["h3=\":443\"; ma=2592000"],"Date":["Wed, 20 Mar 2024 22:29:37 GMT"],"Content-Length":["0"],"Server":["Caddy","Caddy"]}}Both long entries say
"Content-Length":["0"], so no data is being received, it seems.I've spent hours trying to debug this but I have to concede that I am stuck. If anyone can help I would be so grateful!
Files on InvenTree host
Compose file
Unchanged from https://github.com/inventree/InvenTree/blob/master/docker/docker-compose.yml, other than removing
version: "3.8", which I believe is deprecated from Compose v1.27 onwards, and changing the filename tocompose.yaml.Caddyfile
Unchanged from https://github.com/inventree/InvenTree/blob/master/docker/Caddyfile
.env
Files on reverse proxy host
Top-level Caddyfile
import /srv/*.caddyfile/srv/inventree.example.com.caddyfile
Result of command
docker compose logson InvenTree hostThis command was run straight after
docker compose downanddocker compose up -dand accessing https://inventree.example.com from a browser.Beta Was this translation helpful? Give feedback.
All reactions