Jellyfin at a custom location like my.domain.org/jellyfin + SSO doesn't seem to work?

[yourfate]

I use nginx as a reverse proxy and have proxied jellyfin to a custom location, like this:

https://my.domain.org/jellyfin

This works with all apps etc. the nginx location for this looks like this:

location ^~ /jellyfin/ {
proxy_pass http://jellyfin:8096/;       
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
        proxy_set_header X-Forwarded-Protocol $scheme;
        proxy_set_header X-Forwarded-Host $http_host;

 # Disable buffering when the nginx proxy gets very resource heavy upon streaming
 proxy_buffering off;
}

location ^~ /jellyfin/socket {
proxy_pass http://jellyfin:8096/;
        proxy_http_version 1.1;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection "upgrade";
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
        proxy_set_header X-Forwarded-Protocol $scheme;
        proxy_set_header X-Forwarded-Host $http_host;
}

I would now expect the sso to be at https://my.domain.org/jellyfin/sso/OID/start/pocketid.

The sso plugin conf looks like this:

I have configured the "Published Server URIs" in the networking settings of jellyfin to all=https://my.domain.org/jellyfin.

However, when I try to open https://my.domain.org/jellyfin/sso/OID/start/pocketid it loads for like 20-30 seconds, then shows "Error processing request."

I have set up pocket ID successfully with other services.

The "error processing request" is fixed now (weird ipv6 / MTU issue), however, I now get

Sign in to jellyfin

Invalid callback URL, it might be necessary for an admin to fix this.

The callback URL in pocket id is configured to https://my.domain.org/jellyfin/sso/OID/redirect/pocketid and /r/ too.

Here is the config in pocket ID:

[9p4]

Please submit logs and the XML configuration.

[9p4]

Is Jellyfin set up with a base URL? ie in Networking -> Base URL?

[yourfate]

No, in jellyfin the base-url is /, I also posted the networking xml above. I only proxy it to /jellyfin with nginx, the nginx config is in the original post. However, I set this setting in jellyfin:

  <PublishedServerUriBySubnet>
    <string>all=https://server.mydomain.com/jellyfin</string>
  </PublishedServerUriBySubnet>

I cannot set the base-url in jellyfin to /jellyfin, because then I'd have to proxy jellyfin to the root of the domain, but there is another app there.

I think the sso plugin should use that variable (PublischedServerUriBySubnet) to determine the callback uri.

I'm currently setting up a clone of my jellyfin, at jellyfin.mydomain.org, with no location, to see if the problem is somewhere else.

[yourfate]

I have just set up a 2nd jellyfin instance for testing, at https://jellyfin.mydomain.com, and the setup with pocket id works flawlessly there. The problem seems to stem from me proxying to the /jellyfin location in my "real" setup.

[9p4]

Can you send me the reverse proxy configuration?

[yourfate]

Sure, here:

location ^~ /jellyfin/ {
proxy_pass http://jellyfin:8096/;       
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
        proxy_set_header X-Forwarded-Protocol $scheme;
        proxy_set_header X-Forwarded-Host $http_host;

 # Disable buffering when the nginx proxy gets very resource heavy upon streaming
 proxy_buffering off;
}

location ^~ /jellyfin/socket {
proxy_pass http://jellyfin:8096/;
        proxy_http_version 1.1;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection "upgrade";
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
        proxy_set_header X-Forwarded-Protocol $scheme;
        proxy_set_header X-Forwarded-Host $http_host;
}

I use nginxproxymanager, this is the custom configuration on top of their standard config.