[Observium] Re: observium behind a nginx reverse proxy

Mon, 07 Jul 2025 02:55:27 -0700 

Hello
Sorry, i republishing because ip used by lists.observium.org is blacklisted by spamhouse Now i whitelist ip on my mail server , and i can receive mail from obsservium.org 
Thank you for your understanding .


Hello
i m trying to access to observium under a reverse proxy , but after login i have a page with some unauthenticated as token is not get 

vm with observium
OS : DEBIAN 12.11
observium version :     CE 24.12.13800
apache version :
Server version: Apache/2.4.62 (Debian)
Server built:   2024-10-04T15:21:08
Server's Module Magic Number: 20120211:134
Server loaded:  APR 1.7.2, APR-UTIL 1.6.3, PCRE 10.42 2022-12-11
Compiled using: APR 1.7.2, APR-UTIL 1.6.3, PCRE 10.42 2022-12-11
Architecture:   64-bit
Server MPM:
Server compiled with....
 -D APR_HAS_SENDFILE
 -D APR_HAS_MMAP
 -D APR_HAVE_IPV6 (IPv4-mapped addresses enabled)
 -D APR_USE_PROC_PTHREAD_SERIALIZE
 -D APR_USE_PTHREAD_SERIALIZE
 -D SINGLE_LISTEN_UNSERIALIZED_ACCEPT
 -D APR_HAS_OTHER_CHILD
 -D AP_HAVE_RELIABLE_PIPED_LOGS
 -D DYNAMIC_MODULE_LIMIT=256
 -D HTTPD_ROOT="/etc/apache2"
 -D SUEXEC_BIN="/usr/lib/apache2/suexec"
 -D DEFAULT_PIDLOG="/var/run/apache2.pid"
 -D DEFAULT_SCOREBOARD="logs/apache_runtime_status"
 -D DEFAULT_ERRORLOG="logs/error_log"
 -D AP_TYPES_CONFIG_FILE="mime.types"
 -D SERVER_CONFIG_FILE="apache2.conf"
host config :
    SetEnvIf X-Forwarded-Proto "https" HTTPS=on

    ServerName observium.pra.rip
    DocumentRoot /opt/observium/html


      SetHandler application/x-httpd-php


            Options FollowSymLinks
            AllowOverride None


            DirectoryIndex index.php
            Options Indexes FollowSymLinks MultiViews
            AllowOverride All
            Require all granted
Header always set Strict-Transport-Security "max-age=31536000 ; includeSubDomains; preload" 




vm with nginx reverse proxy
OS : DEBIAN 12.11
nginx version : 1.22.1

nginx config
        location / {
                    proxy_pass https://observium.pra.rip;
                    proxy_http_version 1.1;
                    proxy_buffering    off;

                    # Forward headers
                    proxy_set_header   Host              $host;
                    proxy_set_header   X-Real-IP         $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; 
                    proxy_set_header   X-Forwarded-Proto $scheme;
                    proxy_set_header   Upgrade           $http_upgrade;
proxy_set_header Connection $connection_upgrade; 

                    #proxy_pass_header  Set-Cookie;
                    #proxy_cookie_path  / /;
                    proxy_set_header   Cookie            $http_cookie;
        }

        location ~* \.(css|js|png|jpe?g|gif|svg|woff2?|ttf|ico)$ {
                    proxy_pass https://observium.pra.rip;
                    proxy_cache_valid    200 1h;
                    proxy_buffering      off;
                    access_log           off;
        }

        location /rrd/ {
                    proxy_pass https://observium.pra.rip;
                    proxy_buffering      off;
        }

session :
ls -alh /var/lib/php/sessions/
total 24K
drwx-wx-wt 2 www-data www-data 4,0K  3 juil. 11:42 .
drwxr-xr-x 4 root     root     4,0K 10 févr.  2022 ..
-rw------- 1 www-data www-data 386 3 juil. 11:38 sess_0fsi1vaqlf1i5mugqorbjlp406 -rw------- 1 www-data www-data 260 3 juil. 11:55 sess_77ke2t0qmh7oblc2a5cpthb5ca -rw------- 1 www-data www-data 314 3 juil. 11:55 sess_bb5ldiapf9cduuq3sdimjcor89 -rw------- 1 www-data www-data 260 3 juil. 11:47 sess_tb76ik3uh5v3m2a1594vcditho 

cat /var/lib/php/sessions/sess_77ke2t0qmh7oblc2a5cpthb5ca
starttime|i:1751533673;auth_mechanism|s:5:"mysql";requesttoken|s:64:"2d66205c8928de04e12ef2c8b0cfbab3b6233b52c7e84e7718679abd4cb6fc2f";ua|s:32:"ca86b008fc3e2c3d301606d50a2f120e";theme|s:5:"light";mode|s:5:"light";PREV_REMOTE_ADDR|s:22:"2a01:e0a:1ef:7591::203";
you can see the screenshot observium_behind_reverse_proxy.png at https://nxt.pra.rip/s/KMBojmYpHb2Z8KE 
info with and without  :
                    #proxy_pass_header  Set-Cookie;
                    #proxy_cookie_path  / /;
=> give the same result / issue
=> no problem with dns , i use views (internal name is the observium server , reverse proxy have an other name, external name observium pointing to reverse proxy, observium server is unknown) 

What is wrong in my config ?

thank you for your help

pra
</div>

Attachment: 0xCB6057EA.asc
Description: application/pgp-keys

Attachment: signature.asc
Description: OpenPGP digital signature

_______________________________________________
observium mailing list -- [email protected]
To unsubscribe send an email to [email protected]

Reply via email to