OwnCloud and NGinx = untrusted domain = sadface

Comments

• empireOfLove@lemmy.one ⁨11⁩ ⁨months⁩ ago

  FYI, read this.

  source

  • ckeph@lemmy.world ⁨11⁩ ⁨months⁩ ago

    Yes please unless you want to fiddle with authentication services and their configuration sudoku I would recommend using a vpn or vpn service like tailscale (very user friendly) to access your services when not home.

    If you want to continue with this id recommend looking into authelia or authentik to add an additional layer of security :)

    source

    • fiddlestix@lemmy.world ⁨11⁩ ⁨months⁩ ago

      That is very true. I’ve got Tailscale setup and I can get into it through that. Unfortunately I can’t put Tailscale on my work machines, so having access via the web would be useful.

      source

      • -> View More Comments
  • fiddlestix@lemmy.world ⁨11⁩ ⁨months⁩ ago

    Oof. That’s bad news. I don’t have that bit of kit on my setup though. Luckily.

    source

    • empireOfLove@lemmy.one ⁨11⁩ ⁨months⁩ ago

      …I thought you just said you’re running OwnCloud?

      source

      • -> View More Comments
• InEnduringGrowStrong@sh.itjust.works ⁨11⁩ ⁨months⁩ ago

  in nginx:

  server {
  ...
  location / {
      ...
      proxy_pass https://redacted.......;
      proxy_pass_request_headers on;
      proxy_pass_header   Set-Cookie;
      proxy_set_header HOST $host;
      proxy_set_header Referer $http_referer;
      proxy_set_header X-Forwarded-Proto $scheme;
  
      proxy_set_header X-Real-IP $remote_addr;
      proxy_set_header X-Forwarded-Host $server_name;
      proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
  ...
    }
  }
  

  I think the was a trusted proxy setting in owncloud itself that needed to be set too, or maybe I’m thinking of another service.

  source

  • fiddlestix@lemmy.world ⁨11⁩ ⁨months⁩ ago

    Thanks a lot. Whereabouts do I add it to Nginx? Do I need to do this through the dashboard for the proxy host or is there something in docker that I need to add?

    source

    • fiddlestix@lemmy.world ⁨11⁩ ⁨months⁩ ago

      proxy_pass https://

      Thanks. I found it, but still borked. Need to do some digging. Strange things are afoot at the Circle K …

      source
    • 7Sea_Sailor@lemmy.dbzer0.com ⁨11⁩ ⁨months⁩ ago

      Sounds like you’re using nginx proxy Manager, a web based frontend for nginx. If so, you have to edit your existing host, change to custom locations, add one with “/” as the address and the same containername and port. Then click the cogwheel in this entry to open a text box for custom rules. You can paste the following lines into there:

      proxy_set_header X-Forwarded-Proto $scheme;
      proxy_set_header X-Real-IP $remote_addr;
      proxy_set_header X-Forwarded-Host $server_name;
      proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
      

      source

      • -> View More Comments
    • InEnduringGrowStrong@sh.itjust.works ⁨11⁩ ⁨months⁩ ago

      I configure nginx with text condig files.
      No clue how or where that is in your setup, but presumably somewhere where you configure the proxypass and server names.

      source
• nate3d@lemmy.world ⁨11⁩ ⁨months⁩ ago

  If you’re hosting via docker, I highly recommend deploying a Traefik container as it is a phenomenal reverse proxy to pair with containerized hosting

  source

  • Damage@slrpnk.net ⁨11⁩ ⁨months⁩ ago

    What are the advantages over Nginx Proxy Manager?

    source
  • fiddlestix@lemmy.world ⁨11⁩ ⁨months⁩ ago

    Thanks for the rec. I’ve got all my stuff running through NPM and am loath to change it just for this one (annoying) thing!

    source
• t0m5k1@lemmy.world ⁨11⁩ ⁨months⁩ ago

  What env vars are you using for the docker and what’s in the config.php?

  source
• Decronym@lemmy.decronym.xyz ⁨11⁩ ⁨months⁩ ago

  Acronyms, initialisms, abbreviations, contractions, and other phrases which expand to something larger, that I’ve seen in this thread:

  Fewer Letters	More Letters
  HTTP	Hypertext Transfer Protocol, the Web
  IP	Internet Protocol
  nginx	Popular HTTP server

  ---

  [Thread #312 for this sub, first seen 29th Nov 2023, 21:55] [FAQ] [Full list] [Contact] [Source code]

  source
• fiddlestix@lemmy.world ⁨11⁩ ⁨months⁩ ago

  Ah, thank-you so much!

  source
• fiddlestix@lemmy.world ⁨11⁩ ⁨months⁩ ago

  Yeah see I’m not even sure what the env vars are. I’m running it with docker-compose and the only alterations I’ve made to anything are to add my IP address to the config file in the trusted domains array. That’s definitely where it needs to go because if I take it out then it flops hard.

  source
• InEnduringGrowStrong@sh.itjust.works ⁨11⁩ ⁨months⁩ ago

  You need to forward the real IP from nginx.
  I’ll upload an example when I get off work

  source
• ad_on_is@lemmy.world ⁨11⁩ ⁨months⁩ ago

  Not familiar with owncloud.

  But can’t you set something like “127.0.0.1” as domain?

  source
• tagginator@utter.online [bot] ⁨11⁩ ⁨months⁩ ago

  New Lemmy Post: OwnCloud and NGinx = untrusted domain = sadface (https://lemmy.world/post/8927688)
  Tagging: #SelfHosted

  (Replying in the OP of this thread (NOT THIS BOT!) will appear as a comment in the lemmy discussion.)

  I am a FOSS bot. Check my README: https://github.com/db0/lemmy-tagginator/blob/main/README.md

  source