求助：使用Nginx反向代理之后dockge容器报错

[20has]

⚠️ Please verify that this bug has NOT been reported before.

• I checked and didn't find similar issue

🛡️ Security Policy

• I agree to have read this project Security Policy

Description

使用Nginx反向代理之后dockge容器报错

[root@docker dockge]# docker logs -f dockge
2023-12-20T06:48:11Z [SERVER] INFO: Welcome to dockge!
2023-12-20T06:48:11Z [SERVER] INFO: NODE_ENV: production
2023-12-20T06:48:11Z [SERVER] INFO: Server Type: HTTP
2023-12-20T06:48:11Z [SERVER] INFO: Data Dir: ./data/
2023-12-20T06:48:11Z [DB] INFO: Database Type: sqlite
2023-12-20T06:48:11Z [SERVER] INFO: Connected to the database
2023-12-20T06:48:11Z [SERVER] INFO: Listening on 5001
2023-12-20T06:48:19Z [AUTH] **ERROR**: Origin (https://dock.xxx.com:8888) does not match host (dock.xxx.com), IP: ::ffff:192.168.20.103
2023-12-20T06:48:29Z [AUTH] **ERROR**: Origin (https://dock.xxx.com:8888) does not match host (dock.xxx.com), IP: ::ffff:192.168.20.103

👟 Reproduction steps

Nginx的配置文件配置如下：

[root@Nginx vhost]#
[root@Nginx vhost]# cat dock.xxx.com.conf
server {
    listen 80;
    listen 443 ssl http2;
    server_name  dock.xxx.com;
    #ssl on;
    ssl_certificate      /usr/local/nginx/conf/ssl/*.xxx.com.cer;
    ssl_certificate_key  /usr/local/nginx/conf/ssl/*.xxx.com.key;
    ssl_session_timeout 5m;
    ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
    ssl_protocols TLSv1.1 TLSv1.2 TLSv1.3;
    ssl_prefer_server_ciphers on;
    location / {
        proxy_pass http://192.168.20.249:5001;
        proxy_set_header   X-Real-IP $remote_addr;
        proxy_set_header   X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header   Host $host;
        proxy_http_version 1.1;
        proxy_set_header   Upgrade $http_upgrade;
        proxy_set_header   Connection "upgrade";
        #proxy_hide_header  Origin;
    }
}

dockge容器的yaml文件如下：

[root@docker dockge]# cat compose.yaml
version: "3.8"
services:
  dockge:
    image: louislam/dockge:latest
    container_name: dockge
    restart: unless-stopped
    ports:
      - 0.0.0.0:5001:5001
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock
      - ./data:/app/data
      # Stacks Directory
      #  READ IT CAREFULLY. If you did it wrong, your data could end up writing into a WRONG PATH.
      #  1. FULL path only. No relative path (MUST)
      #  2. Left Stacks Path === Right Stacks Path (MUST)
      - /data/docker/dockge/stacks:/opt/stacks
    environment:
      # Tell Dockge where to find the stacks
      - DOCKGE_STACKS_DIR=/opt/stacks

👀 Expected behavior

局域网电脑直接访问 http://192.168.20.249:5001 没问题，但是经过nginx反向代理到外部网络访问报错 无法连接到socket服务器。 [Error: websocket error] 重连中…

😓 Actual Behavior

Dockge Version

1.3.5

💻 Operating System and Arch

CentOS Linux release 7.5.1804

🌐 Browser

chrome 版本 120.0.6099.110（正式版本） （64 位）

🐋 Docker Version

docker 24.0.7

🟩 NodeJS Version

No response

📝 Relevant log output

局域网电脑直接访问 http://192.168.20.249:5001 没问题，但是经过nginx反向代理到外部网络访问报错 无法连接到socket服务器。 [Error: websocket error] 重连中…

[20has]

我找到了一种解决的办法
修改Nginx的配置文件如下：

[root@Nginx vhost]# cat dock.xxxx.com.conf
....
    location / {
        proxy_pass http://192.168.20.249:5001;
        proxy_set_header   X-Real-IP $remote_addr;
        proxy_set_header   X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header   Host $host;
        proxy_http_version 1.1;
        proxy_set_header   Upgrade $http_upgrade;
        proxy_set_header   Connection "upgrade";
        #proxy_hide_header  $origin;
        # 在这里修改 Origin 头部的值 为空【重要的修改在这里】
        proxy_set_header Origin '';
    }
}

访问反代后的页面 http://dock.xxx.com:88/ 正常

此时dockge的容器日志如下：

[root@docker dockge]# docker run \
>   --name dockge \
>   --rm \
>   -p 0.0.0.0:5001:5001 \
>   -v /var/run/docker.sock:/var/run/docker.sock \
>   -v /data/docker/dockge/data:/app/data \
>   -v /data/docker/dockge/stacks:/opt/stacks \
>   -e DOCKGE_STACKS_DIR=/opt/stacks \
>   louislam/dockge:latest
2023-12-20T07:52:16Z [SERVER] INFO: Welcome to dockge!
2023-12-20T07:52:16Z [SERVER] INFO: NODE_ENV: production
2023-12-20T07:52:16Z [SERVER] INFO: Server Type: HTTP
2023-12-20T07:52:16Z [SERVER] INFO: Data Dir: ./data/
2023-12-20T07:52:16Z [DB] INFO: Database Type: sqlite
2023-12-20T07:52:17Z [SERVER] INFO: Connected to the database
2023-12-20T07:52:17Z [SERVER] INFO: Listening on 5001
2023-12-20T07:52:17Z [AUTH] INFO: Origin is not set, IP: ::ffff:192.168.20.103
2023-12-20T07:52:17Z [SERVER] INFO: Socket connected!
2023-12-20T07:52:17Z [AUTH] INFO: Login by token. IP=192.168.20.103
2023-12-20T07:52:17Z [AUTH] INFO: Username from JWT: adminxxxx
2023-12-20T07:52:17Z [AUTH] INFO: Successfully logged in user adminxxxx. IP=192.168.20.103
2023-12-20T07:52:18Z [AUTH] INFO: Origin is not set, IP: ::ffff:192.168.20.103
2023-12-20T07:52:18Z [SERVER] INFO: Socket connected!
2023-12-20T07:52:18Z [AUTH] INFO: Login by token. IP=192.168.20.103
2023-12-20T07:52:18Z [AUTH] INFO: Username from JWT: adminxxxx
2023-12-20T07:52:18Z [AUTH] INFO: Successfully logged in user adminxxxx. IP=192.168.20.103
2023-12-20T07:52:23Z [AUTH] INFO: Origin is not set, IP: ::ffff:192.168.20.103
2023-12-20T07:52:23Z [SERVER] INFO: Socket connected!
2023-12-20T07:52:27Z [UPDATE-CHECKER] INFO: Failed to check for new versions
2023-12-20T07:52:27Z [AUTH] INFO: Login by username + password. IP=192.168.20.103
2023-12-20T07:52:27Z [RATE-LIMIT] INFO: remaining requests: 19
2023-12-20T07:52:27Z [AUTH] INFO: Successfully logged in user adminxxxx. IP=192.168.20.103

[windykyo]

遇到同样问题，的确解决了。3q

[XiongDanqi]

same problem in oldiy-chrome-novnc1. 我在docker chrome容器中添加了密码登陆，在本地ip登陆时，点击noVNC "连接"可以正常弹出输入密码的界面，当时当通过二级域名+反向代理+端口转发访问此容器的服务时，虽然也能进入noVNC "连接"页面，但是点击会报错——"无法连接到服务器"，导致无法输入密码进行登录。在反向代理服务器-自定义标题中，添加了这三个key-value就正常了：1）Upgrade $http_upgrade 2）Connection "upgrade" 3)Origin ''
不清楚这里面的具体原因是什么，看有没有大佬可以解答一下，感谢