NginxProxyManager / NginxProxyManager/nginx-proxy-manager

CSRF Token error using Nginx Proxy Manager

Open
#1,819 11 comments 2 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

stale
Dominant language
TypeScript
Stars
34.2k
Forks
3.9k
Avg merge
21h 12m
Merged PRs (30d)
20

Description

Hi, guys
I'm very new to NPM (Nginx Proxy Manager) yesterday I setup NPM with Docker and hosted my Laravel apps,
At first I was getting Mixed Content error (The page was loaded over HTTPS but requested assets over HTTP)
I managed to fix that by following this tutorial (https://geekscircuit.com/how-to-add/)

But now I'm getting many errors like Laravel's CSRF token mismatch, Meilisearch's API Authorization header missing.

image

I think it has something to do with some headers or something.
But I really don't know how to configure it properly.

My docker-compose.yml

version: '3'
services:
  app:
    image: 'jc21/nginx-proxy-manager:latest'
    container_name: "Nginx-Proxy-Manager-GUI"
    restart: unless-stopped
    ports:
      - '80:80'
      - '81:81'
      - '443:443'
    environment:
      X_FRAME_OPTIONS: "sameorigin"
    volumes:
      - ./data:/data
      - ./letsencrypt:/etc/letsencrypt
      -  ./_hsts.conf:/app/templates/_hsts.conf:ro # I've just added this from this article (https://geekscircuit.com/how-to-add/)

Many thanks in advance :)

Contributor guide

No contributing guide indexed for this repository

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start with the provided docker-compose.yml and the Nginx Proxy Manager proxy configuration, then reproduce the Laravel CSRF mismatch and missing Meilisearch authorization header through HTTPS. Compare the headers and scheme reaching the applications with those sent by the client; done means the hosted applications work without mixed-content, CSRF, or authorization-header errors.

Written by the indexing model from the issue text.

Assessment

Tech stack
docker, docker-compose, laravel, nginx
Domain
devops, infrastructure, networking
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Active
Clarity
Needs clarification
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.