Proxy Error with Nginx and Https enabled

[TheGuardianLight]

Support guidelines

• I've read the support guidelines

I've found a bug and checked that ...

• ... the documentation does not mention anything about my problem
• ... there are no open or closed issues that are related to my problem
• ... it's definitely a Firefly III issue, not me

Description

To keep things simple, I installed Firefly III on my server using Portainer. However, as with any Docker container, it's behind my reverse proxy: Nginx.

However, having configured a Let's Encrypt certificate for my domain name redirecting to Firefly's server (and therefore to nginx), the interface became completely buggy, with nothing loading or working correctly.

Debug information

Debug information generated at 2024-06-30 19:21:30 for Firefly III version v6.1.18.

System information
Item	Value
Firefly III	6.1.18 / v2.1.0 / 24 (exp. 24)
PHP version	8.3.8 (64bits) / apache2handler / Linux x86_64
BCscale	12
Error reporting	Display: Off, reporting: ALL errors
Max upload	67108864 (64 MB)
Database drivers	*mysql*, pgsql, sqlite,
Docker build	#1104, base #85

Firefly III information
Item	Value
Timezone	Europe/Paris + Europe/Paris
App environment	production, debug: false
Layout	v1
Logging	notice, stack / (empty)
Cache driver	file
Default language and locale	fr_FR + equal
Trusted proxies	195.15.223.109
Login provider & user guard	eloquent / web
Login headers	N/A + N/A
Stateful domains
Last cron job	never (never)
Mailer	log

User-specific information
Item	Value
User	#1 of 1
User flags
Session start	2024-06-01 00:00:00
Session end	2024-06-30 23:59:59
View range	1M
User language	fr_FR
User locale	fr_FR
Locale(s) supported	fr_FR.utf8: ✅ fr_FR.UTF-8: ✅
User agent	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36 Edg/127.0.0.0

Expected behaviour

That pages and software load correctly in both http and https.

Steps to reproduce

1. Install Firefly with Portainer like in the documentation.
2. Having a domain name configured and a reverse proxy configured with Nginx.
3. Having an SSL certificate installed with Let's Encrypt's certbot.

Additional info

No response

[JC5]

This is something you'll have to configure in nginx :)

https://docs.firefly-iii.org/references/faq/install/#how-do-i-set-tls-in-firefly-iii-or-the-data-importer

[TheGuardianLight]

Well I have this configuration :

server {

      server_name **redacted**;

      location / {
        proxy_set_header Host $http_host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Scheme $scheme;
        proxy_set_header X-Forwarded-Proto $scheme;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_redirect off;
        proxy_pass http://localhost:8085/;
        client_max_body_size 64M;
        proxy_read_timeout 300s;
      }

    listen 443 ssl; # managed by Certbot
    ssl_certificate /etc/letsencrypt/live/**redacted**/fullchain.pem; # managed by Certbot
    ssl_certificate_key /etc/letsencrypt/live/**redacted**/privkey.pem; # managed by Certbot
    include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
    ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
}
server {
    if ($host = **redacted**) {
        return 301 https://$host$request_uri;
    } # managed by Certbot


      listen 80;

      server_name **redacted**;
    return 404; # managed by Certbot
}

And actually it's show me this :

And there is the navigator console output :

[TheGuardianLight]

Oh wait, I think I found the solution :
Just needed to modify http -> https inside the stack.env at APP_URL and VANITY_URL

[JC5]

Those aren't used by Firefly III to write the urls though, curious.

[ChiruMori]

I encountered the same issue in version 6.1.22, but after modifying the APP_URL, the problem is still not solved, I use Plain Docker.

My run.sh:

docker run -d \
-v /root/docker/fireflyiii/upload:/var/www/html/storage/upload \
--name firefly \
-p 19716:8080 \
-e APP_KEY=xxx \
-e DB_HOST=172.17.33.243 \
-e DB_PORT=6603 \
-e DB_CONNECTION=mysql \
-e DB_DATABASE=firefly \
-e DB_USERNAME=mori \
-e DB_PASSWORD=xxx\
-e DEFAULT_LANGUAGE=zh_CN \
-e TZ=Asia/Shanghai \
-e APP_URL=https://xxx \
fireflyiii/core:latest

My nginx.conf:

    server {
        listen      443 ssl http2;
        server_name f.xxx;
        ssl_certificate  /root/ssl/f.xxx.pem;
        ssl_certificate_key  /root/ssl/f.xxx.key;
        ssl_session_cache  shared:SSL:1m;
    
        location / {
            
            proxy_set_header Host $http_host;
            proxy_set_header X-Real-IP $remote_addr;
            proxy_set_header X-Scheme $scheme;
            proxy_set_header X-Forwarded-Proto $scheme;
            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
            proxy_redirect off;
            client_max_body_size 64M;
            proxy_read_timeout 300s;
            proxy_pass  http://172.17.33.243:19716;
        }
    }

[JC5]

Please also set environment variable TRUSTED_PROXIES=*.

[ChiruMori]

Please also set environment variable TRUSTED_PROXIES=*.

Cool, it works!