Error 401 - No Ticket when running behind nginx in container

[InfiniteBen]

I have proxmox running a container that runs nginx. When I try to connect to proxmox web-ui through the nginx redirect, I get a "401- no ticket" error a bit after logging in.

I'm pretty new to dealing with ssl/tls, but it seems really confusing (both ssl and the error). I've found https://forum.proxmox.com/threads/pve-console-behind-nginx-reverse-proxy.86525/ and https://pve.proxmox.com/wiki/Web_Interface_Via_Nginx_Proxy, but they both seem to have nginx running directly on the proxmox host, where they have access to the keyfiles. Is it standard for nginx deployments to require the keyfiles of all the computers they redirect to? Is there a better way to handle this than copying the keyfiles or mounting them into the client? or am I misunderstanding how to use nginx?

Thanks

 

[Moayad]

Hi,

Could you post the Nginx config?

 

[hrupek]

I have proxmox running a container that runs nginx. When I try to connect to proxmox web-ui through the nginx redirect, I get a "401- no ticket" error a bit after logging in.

I'm pretty new to dealing with ssl/tls, but it seems really confusing (both ssl and the error). I've found https://forum.proxmox.com/threads/pve-console-behind-nginx-reverse-proxy.86525/ and https://pve.proxmox.com/wiki/Web_Interface_Via_Nginx_Proxy, but they both seem to have nginx running directly on the proxmox host, where they have access to the keyfiles. Is it standard for nginx deployments to require the keyfiles of all the computers they redirect to? Is there a better way to handle this than copying the keyfiles or mounting them into the client? or am I misunderstanding how to use nginx?

Thanks

have you found the solution as I deal with same issue.

 

[anoniemerd]

I've had the same problem. Please add this to the Proxy host that you've assigned to your proxmox-node. This worked for me :

Proxy Host > Advanced > Custom Nginx Configuration

Change the <IP-OF-HOST> to the IP address of your proxmox-node.

location / {
proxy_pass https://<IP-OF-HOST>:8006;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_http_version 1.1;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "Upgrade";
proxy_buffering off;
}