[Observium] observium behind a nginx reverse proxy

pra via observium Thu, 03 Jul 2025 05:22:47 -0700

<div style="font-size: 10pt; font-family: Verdana,Geneva,sans-serif">
Hello

i m trying to access to observium under a reverse proxy , but after login i have a page with some unauthenticated as token is not get


vm with observium
OS : DEBIAN 12.11
observium version :     CE 24.12.13800
apache version :
Server version: Apache/2.4.62 (Debian)
Server built:   2024-10-04T15:21:08
Server's Module Magic Number: 20120211:134
Server loaded:  APR 1.7.2, APR-UTIL 1.6.3, PCRE 10.42 2022-12-11
Compiled using: APR 1.7.2, APR-UTIL 1.6.3, PCRE 10.42 2022-12-11
Architecture:   64-bit
Server MPM:
Server compiled with....
 -D APR_HAS_SENDFILE
 -D APR_HAS_MMAP
 -D APR_HAVE_IPV6 (IPv4-mapped addresses enabled)
 -D APR_USE_PROC_PTHREAD_SERIALIZE
 -D APR_USE_PTHREAD_SERIALIZE
 -D SINGLE_LISTEN_UNSERIALIZED_ACCEPT
 -D APR_HAS_OTHER_CHILD
 -D AP_HAVE_RELIABLE_PIPED_LOGS
 -D DYNAMIC_MODULE_LIMIT=256
 -D HTTPD_ROOT=&quot;/etc/apache2&quot;
 -D SUEXEC_BIN=&quot;/usr/lib/apache2/suexec&quot;
 -D DEFAULT_PIDLOG=&quot;/var/run/apache2.pid&quot;
 -D DEFAULT_SCOREBOARD=&quot;logs/apache_runtime_status&quot;
 -D DEFAULT_ERRORLOG=&quot;logs/error_log&quot;
 -D AP_TYPES_CONFIG_FILE=&quot;mime.types&quot;
 -D SERVER_CONFIG_FILE=&quot;apache2.conf&quot;
host config :
    SetEnvIf X-Forwarded-Proto &quot;https&quot; HTTPS=on

    ServerName observium.pra.rip
    DocumentRoot /opt/observium/html


      SetHandler application/x-httpd-php


            Options FollowSymLinks
            AllowOverride None


            DirectoryIndex index.php
            Options Indexes FollowSymLinks MultiViews
            AllowOverride All
            Require all granted

Header always set Strict-Transport-Security "max-age=31536000 ; includeSubDomains; preload"





vm with nginx reverse proxy
OS : DEBIAN 12.11
nginx version : 1.22.1

nginx config
        location / {
                    proxy_pass https://observium.pra.rip;
                    proxy_http_version 1.1;
                    proxy_buffering    off;

                    # Forward headers
                    proxy_set_header   Host              $host;
                    proxy_set_header   X-Real-IP         $remote_addr;

proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;

                    proxy_set_header   X-Forwarded-Proto $scheme;
                    proxy_set_header   Upgrade           $http_upgrade;

proxy_set_header Connection $connection_upgrade;


                    #proxy_pass_header  Set-Cookie;
                    #proxy_cookie_path  / /;
                    proxy_set_header   Cookie            $http_cookie;
        }

        location ~* \.(css|js|png|jpe?g|gif|svg|woff2?|ttf|ico)$ {
                    proxy_pass https://observium.pra.rip;
                    proxy_cache_valid    200 1h;
                    proxy_buffering      off;
                    access_log           off;
        }

        location /rrd/ {
                    proxy_pass https://observium.pra.rip;
                    proxy_buffering      off;
        }

session :
ls -alh /var/lib/php/sessions/
total 24K
drwx-wx-wt 2 www-data www-data 4,0K  3 juil. 11:42 .
drwxr-xr-x 4 root     root     4,0K 10 févr.  2022 ..

-rw------- 1 www-data www-data 386 3 juil. 11:38 sess_0fsi1vaqlf1i5mugqorbjlp406 -rw------- 1 www-data www-data 260 3 juil. 11:55 sess_77ke2t0qmh7oblc2a5cpthb5ca -rw------- 1 www-data www-data 314 3 juil. 11:55 sess_bb5ldiapf9cduuq3sdimjcor89 -rw------- 1 www-data www-data 260 3 juil. 11:47 sess_tb76ik3uh5v3m2a1594vcditho


cat /var/lib/php/sessions/sess_77ke2t0qmh7oblc2a5cpthb5ca
starttime|i:1751533673;auth_mechanism|s:5:&quot;mysql&quot;;requesttoken|s:64:&quot;2d66205c8928de04e12ef2c8b0cfbab3b6233b52c7e84e7718679abd4cb6fc2f&quot;;ua|s:32:&quot;ca86b008fc3e2c3d301606d50a2f120e&quot;;theme|s:5:&quot;light&quot;;mode|s:5:&quot;light&quot;;PREV_REMOTE_ADDR|s:22:&quot;2a01:e0a:1ef:7591::203&quot;;

you can see the screenshot observium_behind_reverse_proxy.png at https://nxt.pra.rip/s/KMBojmYpHb2Z8KE

info with and without  :
                    #proxy_pass_header  Set-Cookie;
                    #proxy_cookie_path  / /;
=&gt; give the same result / issue

=> no problem with dns , i use views (internal name is the observium server , reverse proxy have an other name, external name observium pointing to reverse proxy, observium server is unknown)


What is wrong in my config ?

thank you for your help

pra
</div>

0xCB6057EA.asc
Description: application/pgp-keys

signature.asc
Description: OpenPGP digital signature

_______________________________________________
observium mailing list -- [email protected]
To unsubscribe send an email to [email protected]

[Observium] observium behind a nginx reverse proxy

Reply via email to