SSO authentik and pgadmin partially successful

[pct06]

Hello

I am completely new to SSO and I partially successfully set SSO with Authentik 2025.12.0 and pgadmin v9.11.

pgadmin is up and running as a container in Docker v29.1.5 on OpenMediaVault 8 (Debian 13.3) running on a VirtualBOX VM. I have succesfully setup Nginx and pi-hole to manage local SSL certificates from DuckDNS : authentik, pgadmin are declared as hosts in nginx. Authentik, Nginx, pgadmin and pi-hole are all running in separate docker containers on the OpenMediaVault 8 VM.

I have configured Authentik and pgadmin to use OAuth2 : I use authentik's Domain Name configured in Nginx (authentik.sun-home.duckdns.org) and the IP address (http://192.168.1.254:888) for pgadmin : the SSO works.

If I also set Domain Name configured in Nginx for pgadmin (http://pgadmin.sun-home.duckdns.org), the authentication works but then when back to pgadmin.sun-home.duckds.org/browser it display a black page.

If I try https (https://pgadmin.sun-home.duckdns.org), I got a black page with "Failed to load preferences"

Same if I tried to launch pgadmin directly from Nginx with give these logs :
postfix/postlog: starting the Postfix mail system

[2026-01-29 17:54:16 +0000] [1] [INFO] Starting gunicorn 23.0.0
[2026-01-29 17:54:16 +0000] [1] [INFO] Listening at: http://[::]:80 (1)
[2026-01-29 17:54:16 +0000] [1] [INFO] Using worker: gthread
[2026-01-29 17:54:16 +0000] [88] [INFO] Booting worker with pid: 88
/venv/lib/python3.14/site-packages/sshtunnel.py:1040: SyntaxWarning: 'return' in a 'finally' block
return (ssh_host,
192.168.1.45 - - [29/Jan/2026:17:54:35 +0000] "GET / HTTP/1.1" 302 205 "https://npm.sun-home.duckdns.org/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36"
192.168.1.45 - - [29/Jan/2026:17:54:35 +0000] "GET /browser/ HTTP/1.1" 200 2933 "https://npm.sun-home.duckdns.org/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36"
192.168.1.45 - - [29/Jan/2026:17:54:35 +0000] "GET /browser/check_corrupted_db_file HTTP/1.1" 401 122 "https://pgadmin.sun-home.duckdns.org/browser/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36"
192.168.1.45 - - [29/Jan/2026:17:54:35 +0000] "GET /misc/bgprocess/ HTTP/1.1" 401 122 "https://pgadmin.sun-home.duckdns.org/browser/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36"
192.168.1.45 - - [29/Jan/2026:17:54:35 +0000] "GET /preferences/get_all HTTP/1.1" 401 122 "https://pgadmin.sun-home.duckdns.org/browser/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36"

I guess there is Something wrong with Nginx, have read the page https://www.pgadmin.org/docs/pgadmin4/latest/container_deployment.html#http-via-nginx but it seems far too complex for me to understand what to do.

Thanks

[yogeshmahajan-1903]

@pct06
I think you are missing X-Script-Name in the proxy configuration unless you have not changed it in the Docker configuration.

Here is a typical proxy setting -

proxy_set_header X-Script-Name /pgadmin4;
proxy_set_header Host $host;
proxy_pass http://localhost:5050/;

[pct06]

Thanks

My docker compose file :
services:
nginx-proxy-manager:
image: 'jc21/nginx-proxy-manager:2.11.3'
restart: unless-stopped
container_name: nginx-proxy-manager
ports:
# These ports are in format :
- '81:80' # Public HTTP Port
- '443:443' # Public HTTPS Port
- '82:81' # Admin Web Port
# Add any other Stream port you want to expose
# - '21:21' # FTP
environment:
TZ: "Europe/Paris"
# PUID: 1000
# PGID: 1000
# Uncomment this if you want to change the location of
# the SQLite DB file within the container
# DB_SQLITE_FILE: "/data/database.sqlite"
# Uncomment this if IPv6 is not enabled on your host
# DISABLE_IPV6: 'true'
volumes:
- ./data:/data
- ./letsencrypt:/etc/letsencrypt

Unfortunatly, I have no idea how to add the 3 lines you mention this in my Nginx config of the pgadmin.sun-home.duckdns.org Proxy Host.