[Observium] Re: observium behind a nginx reverse proxy

Hello

Sorry, i republishing because ip used by lists.observium.org is blacklisted by spamhouse Now i whitelist ip on my mail server , and i can receive mail from obsservium.org Thank you for your understanding .

Hello

i m trying to access to observium under a reverse proxy , but after login i have a page with some unauthenticated as token is not get

vm with observium OS : DEBIAN 12.11 observium version : CE 24.12.13800 apache version : Server version: Apache/2.4.62 (Debian) Server built: 2024-10-04T15:21:08 Server's Module Magic Number: 20120211:134 Server loaded: APR 1.7.2, APR-UTIL 1.6.3, PCRE 10.42 2022-12-11 Compiled using: APR 1.7.2, APR-UTIL 1.6.3, PCRE 10.42 2022-12-11 Architecture: 64-bit Server MPM: Server compiled with.... -D APR_HAS_SENDFILE -D APR_HAS_MMAP -D APR_HAVE_IPV6 (IPv4-mapped addresses enabled) -D APR_USE_PROC_PTHREAD_SERIALIZE -D APR_USE_PTHREAD_SERIALIZE -D SINGLE_LISTEN_UNSERIALIZED_ACCEPT -D APR_HAS_OTHER_CHILD -D AP_HAVE_RELIABLE_PIPED_LOGS -D DYNAMIC_MODULE_LIMIT=256 -D HTTPD_ROOT="/etc/apache2" -D SUEXEC_BIN="/usr/lib/apache2/suexec" -D DEFAULT_PIDLOG="/var/run/apache2.pid" -D DEFAULT_SCOREBOARD="logs/apache_runtime_status" -D DEFAULT_ERRORLOG="logs/error_log" -D AP_TYPES_CONFIG_FILE="mime.types" -D SERVER_CONFIG_FILE="apache2.conf" host config : SetEnvIf X-Forwarded-Proto "https" HTTPS=on

ServerName observium.pra.rip
DocumentRoot /opt/observium/html


  SetHandler application/x-httpd-php


        Options FollowSymLinks
        AllowOverride None


        DirectoryIndex index.php
        Options Indexes FollowSymLinks MultiViews
        AllowOverride All
        Require all granted


  Header always set Strict-Transport-Security 

"max-age=31536000 ; includeSubDomains; preload"

vm with nginx reverse proxy OS : DEBIAN 12.11 nginx version : 1.22.1

nginx config location / { proxy_pass https://observium.pra.rip; proxy_http_version 1.1; proxy_buffering off;

                # Forward headers
                proxy_set_header   Host              $host;
                proxy_set_header   X-Real-IP         $remote_addr;
                proxy_set_header   X-Forwarded-For   

$proxy_add_x_forwarded_for; proxy_set_header X-Forwarded-Proto $scheme; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection $connection_upgrade;

                #proxy_pass_header  Set-Cookie;
                #proxy_cookie_path  / /;
                proxy_set_header   Cookie            $http_cookie;
    }

    location ~* \.(css|js|png|jpe?g|gif|svg|woff2?|ttf|ico)$ {
                proxy_pass https://observium.pra.rip;
                proxy_cache_valid    200 1h;
                proxy_buffering      off;
                access_log           off;
    }

    location /rrd/ {
                proxy_pass https://observium.pra.rip;
                proxy_buffering      off;
    }

session : ls -alh /var/lib/php/sessions/ total 24K drwx-wx-wt 2 www-data www-data 4,0K 3 juil. 11:42 . drwxr-xr-x 4 root root 4,0K 10 févr. 2022 .. -rw------- 1 www-data www-data 386 3 juil. 11:38 sess_0fsi1vaqlf1i5mugqorbjlp406 -rw------- 1 www-data www-data 260 3 juil. 11:55 sess_77ke2t0qmh7oblc2a5cpthb5ca -rw------- 1 www-data www-data 314 3 juil. 11:55 sess_bb5ldiapf9cduuq3sdimjcor89 -rw------- 1 www-data www-data 260 3 juil. 11:47 sess_tb76ik3uh5v3m2a1594vcditho

cat /var/lib/php/sessions/sess_77ke2t0qmh7oblc2a5cpthb5ca starttime|i:1751533673;auth_mechanism|s:5:"mysql";requesttoken|s:64:"2d66205c8928de04e12ef2c8b0cfbab3b6233b52c7e84e7718679abd4cb6fc2f";ua|s:32:"ca86b008fc3e2c3d301606d50a2f120e";theme|s:5:"light";mode|s:5:"light";PREV_REMOTE_ADDR|s:22:"2a01:e0a:1ef:7591::203";

you can see the screenshot observium_behind_reverse_proxy.png at https://nxt.pra.rip/s/KMBojmYpHb2Z8KE info with and without : #proxy_pass_header Set-Cookie; #proxy_cookie_path / /; => give the same result / issue => no problem with dns , i use views (internal name is the observium server , reverse proxy have an other name, external name observium pointing to reverse proxy, observium server is unknown)

What is wrong in my config ?

thank you for your help

pra

</div>