Authorization in the Wetty Docker container via Tinyauth, using the Synology reverse proxy for the external domain and SSL certificates

[NSGrid]

Hi everyone, maybe someone can give me some advice why I can't seem to get the redirect to the Wetty-SSH container to work properly (it launches an SSH session in the browser to access the Synology command line)?

Here’s an example. This is how an SSH session starts when I open the Wetty Docker container directly via its local IP address. In my case, it’s 192.168.0.7:8888.

When I try to configure access authorization for the Wetty Docker container using your Tinyauth, I get this (see the attached screenshot). Authorization via Tinyauth succeeds, and I’m redirected to the Wetty container, but the SSH session doesn’t start inside it.

test.domen.ru replaced my original domain here as an example

You can review the Docker Compose and Nginx configuration files. Since, as the developer explained to me earlier, a helper container is required to configure the Synology reverse proxy, the configuration here looks like this:
Synology reverse proxy (external domain and SSL certificates) > Nginx auxiliary container + Tinyauth container > Wetty service container
compose.4.yaml
nginx.9.conf.txt

P. S. Since the previous setup without Tinyauth container
Synology reverse proxy (external domen and SSL certs)> NGINX-alpine container with basic authentication > Wetty container
worked, the SSH-session started normally.

[zero-custom]

The same blank screen, I think we may met the same problem.
I've checked the browser log, scanned by the AI, I thought the problem was here
https://github.com/butlerx/wetty/blob/main/src/server/socketServer/security.ts#L22-L35

And I wrote a docker.sh to patch that file and load the container

#!/bin/sh
set -e

SECURITY_JS="${SECURITY_JS:-/usr/src/app/build/server/socketServer/security.js}"

if [ -f "$SECURITY_JS" ] && ! grep -q 'upgrade-insecure-requests": null' "$SECURITY_JS" 2>/dev/null; then
    node -e '
const fs=require("fs"),p="'"$SECURITY_JS"'";
let c=fs.readFileSync(p,"utf8"),r=c.replace(/(connectSrc\s*:\s*\[[\s\S]*?\]\s*,)(\n\s*)/,(_,b,n)=>b+n+"                \"upgrade-insecure-requests\": null,"+n);
r===c?(console.error("patch failed"),process.exit(1)):(fs.writeFileSync(p,r,"utf8"),console.log("patched"));
'
fi

exec "$@"

volumes:
  - /path/to/dir/:/app
entrypoint: ["/app/docker.sh"]
command: ["node", "./build/main.js", "the commmand line"]