mirror of
https://github.com/advplyr/audiobookshelf-app.git
synced 2026-07-26 14:38:39 +02:00
Can't connect through Traefik #23
Assignees
adam (Adam Melkus)
Clear assignees
adam (Adam Melkus)
No Assignees
Notifications
Due Date
No due date set.
Dependencies
No dependencies set.
Reference: starred/audiobookshelf-app#23
Reference in New Issue
Block a user
Originally created by @kulps on GitHub (Nov 15, 2021).
I've recently setup an ABS server behind Traefik and my account works fine with the browser (internal and external) I am unable to connect via the app when using the FQDN through Traefik. If I use the internal IP:Port with the app, it works. I understand this is potentially more of a Traefik issue but I'm unsure what might be needed.
Traefik is implementing HTTPS, which works fine to the browser player but it's clearly missing some config to make it work with the app.
If anyone has a suggestion, I'd be appreciative.
@advplyr commented on GitHub (Nov 15, 2021):
Using the browser on your phone are you able to connect and play audiobooks using your domain name and reverse proxy?
It sounds like a certificate issue with the android app. There was an issue resolved recently to allow self signed certificates #28.
Any more info you can provide like error messages?
@advplyr commented on GitHub (Nov 15, 2021):
I just came across a stupid bug where if I enter the IP address with "http" in front it won't connect.
This must be a problem with the logic that checks if it should prepend "http". Doesn't sound like this is your issue, but just want to throw it out there.
@rubbo898 commented on GitHub (Nov 16, 2021):
Same here! I've tried to make the App working with FQDN with no luck.
Looking around I've found a suggestion to add the following middleware (not sure is the same scenario!):
Here below my Traefik v2.4.7 DEBUG logs:
While from audiobookshelf logs I can only see a ping:
@advplyr commented on GitHub (Nov 17, 2021):
I'm not sure if you saw, but there was a bug I fixed last week with the socket not re-connecting.
The web socket connection is causing a lot of problems on mobile for some reason. The app is stuck in limbo at the moment while pending approval for android auto, so after that I can see about adding some additional log or info about the status of the connection.
@kulps commented on GitHub (Nov 17, 2021):
I can connect through the Traefik reverse proxy in a browser. Unfortunately there's no error messages I can see to share. When I enter the domain in the Sever Address field it's accepted, but when I enter credentials I get a red box that says "Request Failed" I will try the middleware adjustment suggested by @rubbo898
@rubbo898 commented on GitHub (Nov 17, 2021):
If it's the one about Caddy yes! There is no hurry, my VPN is a great workaround so no service disruption by my side 😉
Waiting for AA!! 🍿🍻
@rubbo898 commented on GitHub (Nov 21, 2021):
I've just tried with the v0.9.25-beta, nothing changed:
ABS correctly receive ping when you enter the domain (as highlighted by @kulps)
As far as I understand (very little) Traefik handle the request and correctly forward it to ABS container:
So it should be the authentication step that is failing!
Last edit I swear: not finding any log in Traefik @advplyr do you think it's possible that the authentication is "stuck" within the Android App? Otherwise I should find further entries in Traefik debug logs, am I wrong?
@advplyr commented on GitHub (Nov 21, 2021):
I was thinking this was failing when checking the server address, but it sounds like it is failing when you are entering the username and password. @rubbo898 are you also seeing "Request Failed" when submitting credentials?
@rubbo898 commented on GitHub (Nov 21, 2021):
I couldn't find any entry except the ones above, asap I'll double check
@advplyr commented on GitHub (Nov 22, 2021):
v0.9.27-betais live on the play store where I added some additional error messages. I realized there was only a generic error message getting printed.Hopefully that can give us a little more to go off of.
@typhooncarr commented on GitHub (Nov 23, 2021):
You need to turn off CORS and rate limiting for the endpoint
docker-compose labels:
- "traefik.enable=true"
## HTTP Routers
- "traefik.http.routers.abs-rtr.entrypoints=https"
- "traefik.http.routers.abs-rtr.rule=Host(
abs.xxxxxxx.com)"## Middlewares
- "traefik.http.routers.abs-rtr.middlewares=secure-chain-nolimit@file"
## HTTP Services
- "traefik.http.routers.abs-rtr.service=abs-svc"
- "traefik.http.services.abs-svc.loadbalancer.server.port=80"
- "traefik.http.services.abs-svc.loadbalancer.passhostheader=true"
secure-chain-nolimit.yml
http:
middlewares:
secure-chain-nolimit:
chain:
middlewares:
- secure-headers-nocors
- authelia
- errorpages
- nofloc
secure-headers-nocors.yml
http:
middlewares:
secure-headers-nocors:
headers:
hostsProxyHeaders:
- "X-Forwarded-Host"
frameDeny: true
sslRedirect: true
sslProxyHeaders:
X-Forwarded-Proto: "https"
stsSeconds: 63072000
stsIncludeSubdomains: true
stsPreload: true
forceSTSHeader: true
customFrameOptionsValue: "allow-from https:xxxxxxx.com"
contentTypeNosniff: true
browserXssFilter: true
referrerPolicy: "same-origin"
permissionsPolicy: "camera=(), microphone=(), geolocation=(), payment=(), usb=(), vr=()"
customResponseHeaders:
X-Robots-Tag: "none,noarchive,nosnippet,notranslate,noimageindex,"
customRequestHeaders:
X-Forwarded-Proto: "https"
@rubbo898 commented on GitHub (Nov 23, 2021):
Hi @typhooncarr, I've tried to follow your advice but nothing changed.
Here below my Traefik configurations
docker run labels:
middlewares-chains.toml file:
middlewares-chains.toml file:
Am I missing something?
Same outcomes from the logs
ABS:
today at 12:19:13 [2021-11-23T11:19:13.190Z] INFO: Recieved pingTraefik:
@typhooncarr commented on GitHub (Nov 23, 2021):
Hi @rubbo898,
In middlewares-secure-headers.headers remove the following lines
accessControlAllowMethods= ["GET", "OPTIONS", "PUT"]
accessControlMaxAge = 100
remove middleware-rate-limit all together depending on the library size, with the new lazy load code that was introduced a little bit ago this might not be needed any more. The rate limit can make it so that the covers show up as invalid
@rubbo898 commented on GitHub (Nov 24, 2021):
I (@typhooncarr) GOT IT!
Here below my configuration, I'm 100% sure it's not the optimal one but at least it works:
ABS container labels:
middlewares-chains.toml file:
middlewares-chains.toml file:
@typhooncarr if you have suggestion on how to improve it please let me/us know! Thanks for your time
@cregkly commented on GitHub (Jun 26, 2022):
I just setup a new install with traefik and didn't need to do any of this.
@alexhk90 commented on GitHub (Nov 11, 2025):
Appreciate that this thread is 5 years old now, but in case anyone else finds it when trying to connect through traefik, I didn't need to do anything special either; it all seems to "just work" adding the usual traefik labels, e.g.