Invalid URL message when accessing through proxy

[lonoak]

Hi,

I have been successfully testing indico with the latest code in master branch of the repository (updated a couple of weeks ago), both locally and using :8080, but I'm having a lot of trouble trying to make it work by configuring the name in a proxy in front of the nginx proxy to add TLS termination. The proxy in my case is based in apache, and I'm able to reach the nginx proxy, but am only seeing the 'Invalid URL' message, either if I let BASE_URL with localhost:8080 (and try to convert it in my front proxy), or if I use anything the real server name (https://indico.myserver.tld/). In other words, I think the line:

indico-containers/indico-prod/nginx.conf

Line 24 in 14ee107

proxy_pass http://indico-web:59999;

...is not working when a proxy is before this proxy, and have no clue why (missing headers? failure to proxy the inner requests?).

Before posting this issue, I have been reading issues #43 and more recent #52, to no luck... and am a bit lost if my configuration is possible. To better explain what I'm trying to achieve:

[external load balancer/TLS terminator: https://indico.mydomain.tld:443] <----> [ nginx-proxy:8080 proxy pass] <----> [indico-web: 59999]

I know this is not a support forum, but I agree with user in #43 that a valid front configuration would be very helpful for those of us trying to use indico based in containers.

Thanks in advance, and please feel free to ask any questions or further information regarding my setup.

Jose.

[lonoak]

Hi again,

just answering to myself it seems all I had to do was to properly set X-Forwarded-Host in both the external an internal proxy. According to the official documentation, this is explained here:

https://docs.getindico.io/en/stable/config/settings/#USE_PROXY

Will just keep this open, just in case there are any comments or remarks about this.

[doylejg]

This has been a problem for me for a long time and I just wanted to share my working setup and config files. Specifically, I am using nginx on the docker host machines as well as the nginx-docker as-is. After much iteration here are my settings:

indico.conf (from indico-containers)

...
BASE_URL = 'https://myconference.ca/'
USE_PROXY = True
...

nginx.conf (from indico-containers)

• Unchanged

.env (form indico-containers)

• remains unchanged, but i wanted to show it

...
## Nginx
## ===========================================
NGINX_PORT=8080
...

indico-nginx.conf (in host nginx conf.d/ or sites-enabled)

• I let certbot modify the nginx config to make it use SSL, so only port 80 is listed here.

server {
  
  listen 80;
  server_name myconference.ca;

  sendfile on;

  location / {
    # Pass request to the container running Indico
    proxy_pass http://localhost:8080;
    
    # Set headers for Indico to receive the correct base URL
    proxy_set_header Host $host;
    proxy_set_header X-Forwarded-Host $host;
    proxy_set_header X-Forwarded-Proto $scheme;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header X-Real-IP $remote_addr;
    
    # Handle redirects properly
    proxy_redirect http://localhost:8080/ /;
    proxy_redirect https://localhost:8080/ /;
  }

}