Docker Compose-hertzbeat-postgresql-victoria-metrics 方式安装，启动后，谷歌浏览器时不时会弹出您与此非私密链接，需要登录。该如何修复 #4415

IAmADryRiceMan · 2026-10-01T14:31:14Z

IAmADryRiceMan
Oct 1, 2026

Docker Compose-hertzbeat-postgresql-victoria-metrics 方式安装，启动后，谷歌浏览器时不时会弹出您与此非私密链接，需要登录。该如何修复。拉取版本是1.9.0 postgre-16 victory-metrics 0.152 版本

Answered by yuluo-yx

Oct 8, 2026

从日志里看 401 和 WWW-Authenticate: Digest，可以确认弹窗是 digest 在认证的时候触发的，可以把这里的认证方式改为 jwt 在登陆试试，可以暂时规避这个问题

application.yml
  auths:
    - jwt

可以删下 token 或者用无痕模式登陆

View full answer

yuluo-yx · 2026-10-01T15:02:22Z

yuluo-yx
Oct 1, 2026
Collaborator

把自动生成的证书换成有效证书；
参考：如果跳到了公司或者局域 wifi 登陆下试试；http://neverssl.com
有代理的话可以把代理关掉试试。

根本原因是 chrome 不信任证书。docker 这种方式启动的是自签证书。

还是有问题可以提供下更详细的信息：比如 chrome 里的报错码

0 replies

IAmADryRiceMan · 2026-10-07T13:04:51Z

IAmADryRiceMan
Oct 7, 2026
Author

并未找到docker 自签证书，并且配置文件也没设置证书，且登录或不登录无日志输出。
root@dd4507b77153:/opt/hertzbeat# find / -name ".crt" -o -name ".pem" 2>/dev/null | grep -i ssl
/etc/ssl/certs/ACCVRAIZ1.pem
/etc/ssl/certs/AC_RAIZ_FNMT-RCM.pem
/etc/ssl/certs/AC_RAIZ_FNMT-RCM_SERVIDORES_SEGUROS.pem
/etc/ssl/certs/ANF_Secure_Server_Root_CA.pem
/etc/ssl/certs/Actalis_Authentication_Root_CA.pem
/etc/ssl/certs/Amazon_Root_CA_1.pem
/etc/ssl/certs/Amazon_Root_CA_2.pem
/etc/ssl/certs/Amazon_Root_CA_3.pem
/etc/ssl/certs/Amazon_Root_CA_4.pem
/etc/ssl/certs/Atos_TrustedRoot_2011.pem
/etc/ssl/certs/Atos_TrustedRoot_Root_CA_ECC_TLS_2021.pem
/etc/ssl/certs/Atos_TrustedRoot_Root_CA_RSA_TLS_2021.pem
/etc/ssl/certs/Autoridad_de_Certificacion_Firmaprofesional_CIF_A62634068.pem
/etc/ssl/certs/BJCA_Global_Root_CA1.pem
/etc/ssl/certs/BJCA_Global_Root_CA2.pem
/etc/ssl/certs/Buypass_Class_2_Root_CA.pem
/etc/ssl/certs/Buypass_Class_3_Root_CA.pem
/etc/ssl/certs/CA_Disig_Root_R2.pem
/etc/ssl/certs/CFCA_EV_ROOT.pem
/etc/ssl/certs/COMODO_ECC_Certification_Authority.pem
/etc/ssl/certs/COMODO_RSA_Certification_Authority.pem
/etc/ssl/certs/Certainly_Root_E1.pem
/etc/ssl/certs/Certainly_Root_R1.pem
/etc/ssl/certs/Certigna_Root_CA.pem
/etc/ssl/certs/Certum_EC-384_CA.pem
/etc/ssl/certs/Certum_Trusted_Network_CA.pem
/etc/ssl/certs/Certum_Trusted_Network_CA_2.pem
/etc/ssl/certs/Certum_Trusted_Root_CA.pem
/etc/ssl/certs/D-TRUST_BR_Root_CA_1_2020.pem
/etc/ssl/certs/D-TRUST_BR_Root_CA_2_2023.pem
/etc/ssl/certs/D-TRUST_EV_Root_CA_1_2020.pem
/etc/ssl/certs/D-TRUST_EV_Root_CA_2_2023.pem
/etc/ssl/certs/D-TRUST_Root_Class_3_CA_2_2009.pem
/etc/ssl/certs/D-TRUST_Root_Class_3_CA_2_EV_2009.pem
/etc/ssl/certs/DigiCert_Assured_ID_Root_G2.pem
/etc/ssl/certs/DigiCert_Assured_ID_Root_G3.pem
/etc/ssl/certs/DigiCert_Global_Root_G2.pem
/etc/ssl/certs/DigiCert_Global_Root_G3.pem
/etc/ssl/certs/DigiCert_TLS_ECC_P384_Root_G5.pem
/etc/ssl/certs/DigiCert_TLS_RSA4096_Root_G5.pem
/etc/ssl/certs/DigiCert_Trusted_Root_G4.pem
/etc/ssl/certs/Entrust_Root_Certification_Authority.pem
/etc/ssl/certs/GDCA_TrustAUTH_R5_ROOT.pem
/etc/ssl/certs/GTS_Root_R1.pem
/etc/ssl/certs/GTS_Root_R3.pem
/etc/ssl/certs/GTS_Root_R4.pem
/etc/ssl/certs/GlobalSign_ECC_Root_CA_-R4.pem
/etc/ssl/certs/GlobalSign_ECC_Root_CA-R5.pem
/etc/ssl/certs/GlobalSign_Root_CA-R3.pem
/etc/ssl/certs/GlobalSign_Root_CA-R6.pem
/etc/ssl/certs/GlobalSign_Root_E46.pem
/etc/ssl/certs/GlobalSign_Root_R46.pem
/etc/ssl/certs/Go_Daddy_Root_Certificate_Authority-G2.pem
/etc/ssl/certs/HARICA_TLS_ECC_Root_CA_2021.pem
/etc/ssl/certs/HARICA_TLS_RSA_Root_CA_2021.pem
/etc/ssl/certs/Hellenic_Academic_and_Research_Institutions_ECC_RootCA_2015.pem
/etc/ssl/certs/Hellenic_Academic_and_Research_Institutions_RootCA_2015.pem
/etc/ssl/certs/HiPKI_Root_CA-G1.pem
/etc/ssl/certs/Hongkong_Post_Root_CA_3.pem
/etc/ssl/certs/ISRG_Root_X1.pem
/etc/ssl/certs/ISRG_Root_X2.pem
/etc/ssl/certs/IdenTrust_Commercial_Root_CA_1.pem
/etc/ssl/certs/IdenTrust_Public_Sector_Root_CA_1.pem
/etc/ssl/certs/Izenpe.com.pem
/etc/ssl/certs/Microsec_e-Szigno_Root_CA_2009.pem
/etc/ssl/certs/Microsoft_ECC_Root_Certificate_Authority_2017.pem
/etc/ssl/certs/Microsoft_RSA_Root_Certificate_Authority_2017.pem
/etc/ssl/certs/NAVER_Global_Root_Certification_Authority.pem
/etc/ssl/certs/NetLock_Arany=Class_Gold=Főtanúsítvány.pem
/etc/ssl/certs/OISTE_Server_Root_ECC_G1.pem
/etc/ssl/certs/OISTE_Server_Root_RSA_G1.pem
/etc/ssl/certs/OISTE_WISeKey_Global_Root_GB_CA.pem
/etc/ssl/certs/OISTE_WISeKey_Global_Root_GC_CA.pem
/etc/ssl/certs/QuoVadis_Root_CA_1_G3.pem
/etc/ssl/certs/QuoVadis_Root_CA_2_G3.pem
/etc/ssl/certs/QuoVadis_Root_CA_3_G3.pem
/etc/ssl/certs/SSL.com_EV_Root_Certification_Authority_ECC.pem
/etc/ssl/certs/SSL.com_EV_Root_Certification_Authority_RSA_R2.pem
/etc/ssl/certs/SSL.com_Root_Certification_Authority_ECC.pem
/etc/ssl/certs/SSL.com_Root_Certification_Authority_RSA.pem
/etc/ssl/certs/SSL.com_TLS_ECC_Root_CA_2022.pem
/etc/ssl/certs/SSL.com_TLS_RSA_Root_CA_2022.pem
/etc/ssl/certs/SZAFIR_ROOT_CA2.pem
/etc/ssl/certs/Sectigo_Public_Server_Authentication_Root_E46.pem
/etc/ssl/certs/Sectigo_Public_Server_Authentication_Root_R46.pem
/etc/ssl/certs/SecureSign_Root_CA12.pem
/etc/ssl/certs/SecureSign_Root_CA14.pem
/etc/ssl/certs/SecureSign_Root_CA15.pem
/etc/ssl/certs/Security_Communication_ECC_RootCA1.pem
/etc/ssl/certs/Security_Communication_RootCA2.pem
/etc/ssl/certs/Starfield_Root_Certificate_Authority-G2.pem
/etc/ssl/certs/SwissSign_RSA_TLS_Root_CA_2022-1.pem
/etc/ssl/certs/T-TeleSec_GlobalRoot_Class_2.pem
/etc/ssl/certs/T-TeleSec_GlobalRoot_Class_3.pem
/etc/ssl/certs/TUBITAK_Kamu_SM_SSL_Kok_Sertifikasi-Surum_1.pem
/etc/ssl/certs/TWCA_CYBER_Root_CA.pem
/etc/ssl/certs/TWCA_Global_Root_CA.pem
/etc/ssl/certs/TWCA_Root_Certification_Authority.pem
/etc/ssl/certs/Telekom_Security_TLS_ECC_Root_2020.pem
/etc/ssl/certs/Telekom_Security_TLS_RSA_Root_2023.pem
/etc/ssl/certs/Telia_Root_CA_v2.pem
/etc/ssl/certs/TrustAsia_Global_Root_CA_G3.pem
/etc/ssl/certs/TrustAsia_Global_Root_CA_G4.pem
/etc/ssl/certs/TrustAsia_TLS_ECC_Root_CA.pem
/etc/ssl/certs/TrustAsia_TLS_RSA_Root_CA.pem
/etc/ssl/certs/TunTrust_Root_CA.pem
/etc/ssl/certs/UCA_Extended_Validation_Root.pem
/etc/ssl/certs/UCA_Global_G2_Root.pem
/etc/ssl/certs/USERTrust_ECC_Certification_Authority.pem
/etc/ssl/certs/USERTrust_RSA_Certification_Authority.pem
/etc/ssl/certs/ca-certificates.crt
/etc/ssl/certs/certSIGN_Root_CA_G2.pem
/etc/ssl/certs/e-Szigno_Root_CA_2017.pem
/etc/ssl/certs/e-Szigno_TLS_Root_CA_2023.pem
/etc/ssl/certs/ePKI_Root_Certification_Authority.pem
/etc/ssl/certs/emSign_ECC_Root_CA-C3.pem
/etc/ssl/certs/emSign_ECC_Root_CA-G3.pem
/etc/ssl/certs/emSign_Root_CA-C1.pem
/etc/ssl/certs/emSign_Root_CA-G1.pem
/etc/ssl/certs/vTrus_ECC_Root_CA.pem
/etc/ssl/certs/vTrus_Root_CA.pem
/usr/lib/ssl/cert.pem
/usr/share/ca-certificates/mozilla/SSL.com_EV_Root_Certification_Authority_ECC.crt
/usr/share/ca-certificates/mozilla/SSL.com_EV_Root_Certification_Authority_RSA_R2.crt
/usr/share/ca-certificates/mozilla/SSL.com_Root_Certification_Authority_ECC.crt
/usr/share/ca-certificates/mozilla/SSL.com_Root_Certification_Authority_RSA.crt
/usr/share/ca-certificates/mozilla/SSL.com_TLS_ECC_Root_CA_2022.crt
/usr/share/ca-certificates/mozilla/SSL.com_TLS_RSA_Root_CA_2022.crt
/usr/share/ca-certificates/mozilla/TUBITAK_Kamu_SM_SSL_Kok_Sertifikasi-_Surum_1.crt
root@dd4507b77153:/opt/hertzbeat# cat /opt/hertzbeat/config/application.yml | grep -i -A 10 "ssl"
socketFactoryClass: javax.net.ssl.SSLSocketFactory
ssl:
enable: true
starttls:
enable: false

common:
queue:
# memory, kafka, redis
type: memory
# properties when queue type is kafka
kafka:
并未查到docker 自签证书。

0 replies

yuluo-yx · 2026-10-07T13:34:51Z

yuluo-yx
Oct 7, 2026
Collaborator

compose 部署的时候 sureness 配置里 auth 用的是 digest 吗？

curl --noproxy '*' -sS -D - -o /dev/null http://127.0.0.1:1157/api/monitors

可以 curl 下看看，是不是返回了挑战应答请求

1 reply

IAmADryRiceMan Oct 7, 2026
Author

配置文件默认，并未修改参数。
application.yml
86 auths:
87 - digest
88 - basic
89 - jwt
90 jwt:
91 secret: 'CyaFv0bwq2Eik0jdrKUtsA6bx3sDJeFV643R
92 LnfKefTjsIfJLBa2YkhEqEGtcHDTNe4CU6+9
93 8tVt4bisXQ13rbN0oxhUZR73M6EByXIO+SV5
94 dKhaX0csgOCTlCxq20yhmUea6H6JIpSE2Rwp'
sureness 配置文件，什么都修改。
./sureness.yml: - /api/account/auth/refresh===post===[admin,user,guest]
./sureness.yml: - /api/account/auth/**===*

curl --noproxy '*' -sS -D - -o /dev/null http://192.168.110.134:1157/api/monitors

HTTP/1.1 401
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
WWW-Authenticate: Digest realm=sureness_realm,nonce=b3295dab9b6193cedf1c42e47b73c8d4,qop=auth
Transfer-Encoding: chunked
Date: Wed, 07 Oct 2026 14:15:38 GMT

yuluo-yx · 2026-10-07T13:36:54Z

yuluo-yx
Oct 7, 2026
Collaborator

还有就是你可以把日志级别调到 debug 看下日志输出确认下

hertzbeat-manager/src/main/java/com/usthe/sureness/configuration/SurenessJakartaServletFilter.java:96

1 reply

IAmADryRiceMan Oct 7, 2026
Author

目前使用的 docker run 未使用docker-compose 这是刚刚弹出窗口，使用admin/hertzbeat 账号登录后的日志，使用账号密码后，就暂时不弹出窗口，但过段时间就会复发。
dd4507b7715310-2026-10-07.0.log
这是清空日志，重启容器后，从登录到弹窗，到输入账号密码，登录的日志

yuluo-yx · 2026-10-08T05:02:24Z

yuluo-yx
Oct 8, 2026
Collaborator

从日志里看 401 和 WWW-Authenticate: Digest，可以确认弹窗是 digest 在认证的时候触发的，可以把这里的认证方式改为 jwt 在登陆试试，可以暂时规避这个问题

application.yml
  auths:
    - jwt

可以删下 token 或者用无痕模式登陆

1 reply

IAmADryRiceMan Oct 8, 2026
Author

调整后，暂时不弹出窗口，感谢感谢。我现在用用

Navigation Menu

Repository navigation

Docker Compose-hertzbeat-postgresql-victoria-metrics 方式安装，启动后，谷歌浏览器时不时会弹出您与此非私密链接，需要登录。该如何修复 #4415

Uh oh!

{{title}}

Uh oh!

Replies: 5 comments 3 replies

Uh oh!

{{title}}

Uh oh!

Uh oh!

{{title}}

Uh oh!

Uh oh!

{{title}}

Uh oh!

Uh oh!

{{title}}

Uh oh!

Uh oh!

{{title}}

Uh oh!

Uh oh!

{{title}}

Uh oh!

Uh oh!

{{title}}

Uh oh!

Uh oh!

{{editor}}'s edit

{{editor}}'s edit

Uh oh!

Uh oh!

{{title}}

Uh oh!

Select a reply

Uh oh!

Docker Compose-hertzbeat-postgresql-victoria-metrics 方式安装，启动后，谷歌浏览器时不时会弹出您与此非私密链接，需要登录。该如何修复 #4415

Uh oh!

IAmADryRiceMan Oct 1, 2026

Replies: 5 comments · 3 replies

Uh oh!

yuluo-yx Oct 1, 2026 Collaborator

Uh oh!

IAmADryRiceMan Oct 7, 2026 Author

Uh oh!

yuluo-yx Oct 7, 2026 Collaborator

Uh oh!

IAmADryRiceMan Oct 7, 2026 Author

curl --noproxy '*' -sS -D - -o /dev/null http://192.168.110.134:1157/api/monitors

Uh oh!

yuluo-yx Oct 7, 2026 Collaborator

Uh oh!

IAmADryRiceMan Oct 7, 2026 Author

Uh oh!

Uh oh!

yuluo-yx Oct 8, 2026 Collaborator

Uh oh!

IAmADryRiceMan Oct 8, 2026 Author

IAmADryRiceMan
Oct 1, 2026

Replies: 5 comments 3 replies

yuluo-yx
Oct 1, 2026
Collaborator

IAmADryRiceMan
Oct 7, 2026
Author

yuluo-yx
Oct 7, 2026
Collaborator

IAmADryRiceMan Oct 7, 2026
Author

yuluo-yx
Oct 7, 2026
Collaborator

IAmADryRiceMan Oct 7, 2026
Author

yuluo-yx
Oct 8, 2026
Collaborator

IAmADryRiceMan Oct 8, 2026
Author