2fauth behind NginxProxyManager

[betadrome]

How is it possible to use 2fauth behind NginxProxyManager? If I define http://[local_ip]:8000 in NPM as inbound address, it is not possible for me, to open 2fauth over the defined Domain, like https://2fauth.example.org. Over http it works fine, just and only https:// gives me an blank white site back:

[Bubka]

Hi,

This is because you didn't add the s (of https) to the APP_URL env var (and the ASSET_URL var if you set it).

[betadrome]

Hi,

This is because you didn't add the s (of https) to the APP_URL env var (and the ASSET_URL var if you set it).

Hey, I have already tried this, but every time I get an error in the browser: NSURLErrorSecureConnectionFailed.

Here is my config (example data):

version: "3"
services:
  2fauth:
    image: 2fauth/2fauth
    container_name: 2fauth
    volumes:
      - ./2fauth:/2fauth
    ports:
      - 8000:8000/tcp
    environment:
      # You can change the name of the app
      - APP_NAME=2FAuth
      # You can leave this on "local". If you change it to production most console comm
ands will ask for extra confirmation.
      # Never set it to "testing".
      - APP_ENV=local
      # Set to true if you want to see debug information in error screens.
      - APP_DEBUG=false
      # This should be your email address
      - [email protected]
      # The encryption key for  our database and sessions. Keep this very secure.
      # If you generate a new one all existing data must be considered LOST.
      # Change it to a string of exactly 32 chars or use command `php artisan key:gener
ate` to generate it
      - APP_KEY=abcdefghijklmnopqrstuvwxyz123456
      # This variable must match your installation's external address.
      # Webauthn won't work otherwise.
      - APP_URL=https://192.168.178.2
      # If you want to serve js assets from a CDN (like https://cdn.example.com),
      # you need to set this custom URL here.
      # Otherwise, this should be the exact same value as APP_URL.
      - ASSET_URL=https://192.168.178.2
      # Turn this to true if you want your app to react like a demo.
      # The Demo mode reset the app content every hours and set a generic demo user.
      - IS_DEMO_APP=false

I have also tried to put ":8000" behind the app and asset - url, but same problem.

Edit: running currently on debian12

[Bubka]

Value of APP_URL should be https://2fauth.example.org/, not the internal ip address.

[TarcisioMenezes]

Is it possible to access 2fauth through an internal IP as well? Like http://192.168.50.50:8000?
I get a blank screen when I try.
I set APP_URL to a domain of mine e.g https://2fauth.example.org and it works fine.

I wonder whenever my reverse proxy is down , how I'll be able to access 2fauth locally.
Thanks.

[Bubka]

@TarcisioMenezes It should work with an internal IP as long as APP_URL is set accordingly and the config cache has been refreshed. If you are using Docker, you will have to restart the container, otherwise just run php artisan config:clear in a terminal right after setting APP_URL to the new value.

[cr4zyduck]

Hello,

I installed the LXC container today from https://community-scripts.github.io/ProxmoxVE/scripts?id=2fauth and I can't access it via Nginx Proxy Manager.

I edited the /opt/2fauth/docker/docker-compose.yml file and modified the APP_URL entry to https://my_ddns_domain.tld and added TRUSTED_PROXIES=*

I also tried modifying the /etc/nginx/conf.d/2fauth.conf file and modifying the server_name line with my_ddns_domain.tld

I also tried modifying the Nginx Proxy Host according to what is said in this thread: community-scripts/ProxmoxVE#1109 by adding the following to the advanced Proxy Host configuration:

location / {
proxy_pass $forward_scheme://$server:$port;

proxy_set_header X-Forwarded-Proto $scheme;
proxy_set_header X-Forwarded-Host $host;
proxy_set_header X-Forwarded-Server $host;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header Host $host;
# This line below is optional and may help in some proxying cases
proxy_set_header X-Forwarded-Port $server_port;
}

Nothing works for me, at most I get a blank page.

Where can I be wrong?

Thank You

[cr4zyduck]

Finally found it:

Solution is here: community-scripts/ProxmoxVE#1109

But I had to modify 3 files:

/opt/2fauth/docker/docker-compose.yml
/opt/2fauth/.env
/etc/nginx/conf.d/2fauth.conf