-
Notifications
You must be signed in to change notification settings - Fork 42
Description
Hello,
Today I ran a docker-compose pull to update my docker koillection.
My server is behind an nginx reverse proxy and authentication was working perfectly until today's pull.
Since then, I have been getting an Invalid CSRF token notification. This makes my site inaccessible from the web (it is still accessible locally).
Here is my .env file before the Invalid CSRF Token (I repeat, everything was working fine before the dc-pulling)
`APP_DEBUG=0
APP_ENV=prod
#APP_SECRET=
HTTPS_ENABLED=1
UPLOAD_MAX_FILESIZE=20M
PHP_MEMORY_LIMIT=512M
PHP_TZ=Europe/Paris
CORS_ALLOW_ORIGIN='^https?://(localhost|127.0.0.1)(:[0-9]+)?$'
JWT_SECRET_KEY=%kernel.project_dir%/config/jwt/private.pem
JWT_PUBLIC_KEY=%kernel.project_dir%/config/jwt/public.pem
#JWT_PASSPHRASE=
DB_DRIVER=pdo_pgsql
DB_NAME=******
DB_HOST=db
DB_PORT=5432
DB_USER=******
DB_PASSWORD=******
DB_VERSION=16`
Here's my docker-compose.yml file before the Invalid CSRF Token (I repeat all's workin nice before the dc-pulling)
`services:
koillection:
image: koillection/koillection
container_name: koillection
restart: unless-stopped
ports:
- 80:80
env_file:
- .env
depends_on:
- db
volumes:
- ./volumes/koillection/uploads:/uploads
db:
image: postgres:16
container_name: db
restart: unless-stopped
env_file:
- .env
environment:
- POSTGRES_DB=${DB_NAME}
- POSTGRES_USER=${DB_USER}
- POSTGRES_PASSWORD=${DB_PASSWORD}
volumes:
- "./volumes/postgresql:/var/lib/postgresql/data"`
I tried adding this to the .env file, even though it worked without it before, but nothing changed.
SYMFONY_TRUSTED_PROXIES=172.16.2.10/22
SYMFONY_TRUSTED_HEADERS=forwarded,x-forwarded-for,x-forwarded-host,x-forwarded-proto,x-forwarded-port,x-forwarded-prefix
Can't find any log and have debug mode ON
Ths for help