Hello,
I tried to get help on authentik forum but got no response so posting here in hopes of a resolution.
I recently set up Nginx for sweet names and everything works fine, so I got authentik to protect my setup and everything work fine except when I open the console of any of my containers or even host, basically preventing me to use console over proxmox.<domain name>.com , I can still connect and use the console if I access proxmox by <IP>:8006,
If I remove authentik configuration from nginx everything works again including the console:
All other apps and containers like portainer, nginx, filebrowser work just fine going through nginx and authentik just proxmox is having some weird issue and i cant figure out why?
This is the error I get trying to use console:
Undefined (code: 1006)
This is whats been shown in "Tasks" panel in red at the bottom:
This is whats been shown in "Cluster log" panel in red at the bottom :
Nginx setup for proxmox:
the advanced tab has the following configuration:
My authentik is running healthy on docker with the following ports:
http://192.168.100.200:7000
https://192.168.100.200:7443
If I remove the above code from the advanced tab and access proxmox.<domain name>.com , then the console works fine, so i guess somewhere in this code its having issues. BTW this code is provided by Authentik itself to put in nginx proxy manager advanced tab so nginx routes to authentik first for authentication.
Please help me out how to get console working from outside.
I tried to get help on authentik forum but got no response so posting here in hopes of a resolution.
I recently set up Nginx for sweet names and everything works fine, so I got authentik to protect my setup and everything work fine except when I open the console of any of my containers or even host, basically preventing me to use console over proxmox.<domain name>.com , I can still connect and use the console if I access proxmox by <IP>:8006,
If I remove authentik configuration from nginx everything works again including the console:
All other apps and containers like portainer, nginx, filebrowser work just fine going through nginx and authentik just proxmox is having some weird issue and i cant figure out why?
This is the error I get trying to use console:
Undefined (code: 1006)
This is whats been shown in "Tasks" panel in red at the bottom:
Code:
failed waiting for client: timed out
TASK ERROR: command '/usr/bin/termproxy 5900 --path /nodes/pve1 --perm Sys.Console -- /bin/login -f root' failed: exit code 1This is whats been shown in "Cluster log" panel in red at the bottom :
Code:
end task UPIDve1:00012849:000ACCB5:63C25CC0:vncshell::root@pam: command '/usr/bin/termproxy 5900 --path /nodes/pve1 --perm Sys.Console -- /bin/login -f root' failed: exit code 1Nginx setup for proxmox:
the advanced tab has the following configuration:
Code:
# Increase buffer size for large headers
# This is needed only if you get 'upstream sent too big header while reading response
# header from upstream' error when trying to access an application protected by goauthentik
proxy_buffers 8 16k;
proxy_buffer_size 32k;
# Make sure not to redirect traffic to a port 4443
port_in_redirect off;
location / {
# Put your proxy_pass to your application here
proxy_pass $forward_scheme://$server:$port;
# Set any other headers your application might need
# proxy_set_header Host $host;
# proxy_set_header ...
##############################
# authentik-specific config
##############################
auth_request /outpost.goauthentik.io/auth/nginx;
error_page 401 = @goauthentik_proxy_signin;
auth_request_set $auth_cookie $upstream_http_set_cookie;
add_header Set-Cookie $auth_cookie;
# translate headers from the outposts back to the actual upstream
auth_request_set $authentik_username $upstream_http_x_authentik_username;
auth_request_set $authentik_groups $upstream_http_x_authentik_groups;
auth_request_set $authentik_email $upstream_http_x_authentik_email;
auth_request_set $authentik_name $upstream_http_x_authentik_name;
auth_request_set $authentik_uid $upstream_http_x_authentik_uid;
proxy_set_header X-authentik-username $authentik_username;
proxy_set_header X-authentik-groups $authentik_groups;
proxy_set_header X-authentik-email $authentik_email;
proxy_set_header X-authentik-name $authentik_name;
proxy_set_header X-authentik-uid $authentik_uid;
}
# all requests to /outpost.goauthentik.io must be accessible without authentication
location /outpost.goauthentik.io {
proxy_pass http://192.168.100.200:7000/outpost.goauthentik.io;
# ensure the host of this vserver matches your external URL you've configured
# in authentik
proxy_set_header Host $host;
proxy_set_header X-Original-URL $scheme://$http_host$request_uri;
add_header Set-Cookie $auth_cookie;
auth_request_set $auth_cookie $upstream_http_set_cookie;
proxy_pass_request_body off;
proxy_set_header Content-Length "";
}
# Special location for when the /auth endpoint returns a 401,
# redirect to the /start URL which initiates SSO
location @goauthentik_proxy_signin {
internal;
add_header Set-Cookie $auth_cookie;
return 302 /outpost.goauthentik.io/start?rd=$request_uri;
# For domain level, use the below error_page to redirect to your authentik server with the full redirect path
# return 302 https://auth.anexcore.com/outpost.goauthentik.io/start?rd=$scheme://$http_host$request_uri;
}My authentik is running healthy on docker with the following ports:
http://192.168.100.200:7000
https://192.168.100.200:7443
If I remove the above code from the advanced tab and access proxmox.<domain name>.com , then the console works fine, so i guess somewhere in this code its having issues. BTW this code is provided by Authentik itself to put in nginx proxy manager advanced tab so nginx routes to authentik first for authentication.
Please help me out how to get console working from outside.
Last edited:
