cannot load [...] due to access control checks

[vquie]

Hi,

I just installed the latest docker image in my homelab which was working like a charm. Awesome tool.

When I installed it on my real world vps behind cloudflare I discovered that adding links is not working anymore. Because of CORS, I guess.

The message in my browser says
XMLHttpRequest cannot load http://mydomain/studio/linkparamform_part/1/0 due to access control checks.
while the server says
"GET /studio/js/bootstrap.min.js.map HTTP/1.1" 404 6609 "https://mydomain/studio/add-link" "client-identifier" 1410 6821

What can I do to add links again?

[JulianPrieber]

Hey,

You could try to turn this option on and see if that fixes it.

[vquie]

I did. I also did turned on the button that said it would explode. That warning was true :-D

[JulianPrieber]

On the latest version, this option has been split into 2 separate options.
This one is perfectly fine to use on a docker.

The other one in the advanced section I wouldn't even touch.

[JulianPrieber]

Do you have any mixed content errors in your console?

[vquie]

Not anymore. I had those with k8s nginx ingress (my first try), Cloudflare and Traefik. They could all be sorted out with upgrade-insecure-requests.
The issue I have now occurs only with Cloudflare. With Traefik I just tested a second ago to check if there was an issue with the config of the app.
This very same docker container has this issue with Cloudflare, but not Traefik. Everything else is the same.

[JulianPrieber]

I'm going to move this issue to the Docker repo real quick

[JulianPrieber]

Can you access your docker locally and see if that works?

[vquie]

Just tried with the local ip address of the container..... no issue.

[JulianPrieber]

Alright. If I understand this correctly, you want to use a reverse proxy and have access to multiple systems to do so?

[vquie]

I want to use cloudflare only as reverse proxy and with their tunnel. Everything else was just a test or troubleshooting.

[JulianPrieber]

Hmm, unfortunately we don't have any documentation for that.

However, I personally have a test instance that uses a Cloudflare tunnel with the latest version installed.
There everything works absolutely fine.

Here is my config:

[vquie]

I was wondering if it was an issue with the config in /htdocs/config/cors.php. I can't say for sure though.
Otherwise it could be something in cloudflare, not the tunnel part, or apache I guess. Is your setup exactly like in the new image?

[JulianPrieber]

The screenshot I attached was made from the setup I'm currently using and have tested.