Using a web proxy for the Server GUI

[motoridersd]

I'm trying to use Nginx Proxy Manager to put the web GUI behind an https FQDN. I tried adding the domain as the WEB_PUBLIC_URL or as EXTRA_CORS_ORIGINS but I get the same error no matter where I put it:

Something went wrong!
NetworkError when attempting to fetch resource.

It works for the TV_WEB_PUBLIC_URL using https and a FQDN. Does the proxy need to provide additional information or do I need to add the IP of the proxy to the EXTRA_CORS_ORIGINS variable?

[Quixomatic]

Can you paste part of your .env that you're using for the image? I'm using NPM as well and had to set up some extra custom locations in the interface.

I set my reverse proxy up so that tv.turboforge.io served both the server/api as well as the tv-web interface and then set up tv-admin.turboforge.io to serve the admin UI. All three of them could have been set up as separate subdomains which would have made it easier. This is some of my docker .env:

SERVER_PUBLIC_URL=https://tv.turboforge.io
WEB_PUBLIC_URL=https://tv-admin.turboforge.io
EXTRA_CORS_ORIGINS=http://192.168.1.168:36021
TV_WEB_PUBLIC_URL=https://tv.turboforge.io
TV_SERVER_URL=https://tv.turboforge.io

[motoridersd]

The TV Web domain is working well, I just have

TV_WEB_PUBLIC_URL=https://tv.domain.net

NPM is pointing tv.domain.net to http://192.168.1.31:36022

For the Server Admin I have

SERVER_PUBLIC_URL=http://192.168.1.31:36020
WEB_PUBLIC_URL=https://airwave.domain.net
EXTRA_CORS_ORIGINS=http://192.168.1.31:36021

and I have NPM pointed to http://192.168.1.31:36021 and that is what fails.

I don't have a domain for the Server at 36020 at the moment.

What is your NPM config for tv-admin.turboforge.io?

[Quixomatic]

The reason your admin ui might not be working is because better-auth requires the protocols to match between the admin ui and the api. So you have to expose both the server/api as well as the admin ui so that both are HTTPS.

What I have been recommending to people is to just expose 3 separate subdomains to make it easiest (you already have two out of the three)

So you could just set up

• https://tv.domain.net (tv-web)
• https://airwave.domain.net (admin ui)
• https://airwave-api.domain.net (server/api)

Here is my NPM config for tv-admin its nothing special.

[motoridersd]

Ah ok, that was it. I added a domain for the API and updated the .env so all URLs use https and a domain and they all work properly.

[Quixomatic]

Nice! Glad its working now!

[Quixomatic]

It can be a lot of work getting all this stuff exposed to the web for remote use, and a few people have complained that its too complicated. Which is why I started building a simpler solution, and I haven't announced it yet because NPM + cloudflare tunnel or tailscale are perfectly viable solutions.

Basically signing up at https://airwave.software will allow you to bind your local server to a subdomain issued by airwave.software and allow you to tunnel everything through that really easily. It works perfectly, just no need for it yet since most people trying out airwave are enthusiasts. That domain, airwave.software essentially takes on the burden of doing the relay/tunneling for you so that you can easily access your server/api/admin-ui/tv-web all from one place.

If you're ever interested, I do need people to test it out!

[motoridersd]

I'm not currently opening this up to the internet, it's just internal and I like running all my internal services with https and tailscale.

This is an interesting service. Do you have any kind of access control in front of this for each user? Say, limit to public IPs/regions, etc.

[Quixomatic]

Not yet, and I hadn't even considered that people would want to have those same kind of limiters you can put on NPM/cloudflare. My goal was just to offer an easy solution to an area a lot of users don't like to mess with. I don't even like doing reverse proxy stuff myself haha

[motoridersd]

haha fair. I use Cloudflare in front of my NPM so I can easily expose things and then add some controls through them, but lately I rarely expose things and use tailscale a lot.