Skip to content

Invalid CSRF token. since last docker command docker-compose pull #1400

@Irwin0812

Description

@Irwin0812

Hello,

Today I ran a docker-compose pull to update my docker koillection.

My server is behind an nginx reverse proxy and authentication was working perfectly until today's pull.

Since then, I have been getting an Invalid CSRF token notification. This makes my site inaccessible from the web (it is still accessible locally).

Here is my .env file before the Invalid CSRF Token (I repeat, everything was working fine before the dc-pulling)

`APP_DEBUG=0
APP_ENV=prod
#APP_SECRET=

HTTPS_ENABLED=1
UPLOAD_MAX_FILESIZE=20M
PHP_MEMORY_LIMIT=512M
PHP_TZ=Europe/Paris

CORS_ALLOW_ORIGIN='^https?://(localhost|127.0.0.1)(:[0-9]+)?$'
JWT_SECRET_KEY=%kernel.project_dir%/config/jwt/private.pem
JWT_PUBLIC_KEY=%kernel.project_dir%/config/jwt/public.pem
#JWT_PASSPHRASE=

DB_DRIVER=pdo_pgsql
DB_NAME=******
DB_HOST=db
DB_PORT=5432
DB_USER=******
DB_PASSWORD=******
DB_VERSION=16`

Here's my docker-compose.yml file before the Invalid CSRF Token (I repeat all's workin nice before the dc-pulling)

`services:

koillection:
    image: koillection/koillection
    container_name: koillection
    restart: unless-stopped
    ports:
        - 80:80
    env_file:
        - .env
    depends_on:
        - db
    volumes:
        - ./volumes/koillection/uploads:/uploads


db:
    image: postgres:16
    container_name: db
    restart: unless-stopped
    env_file:
        - .env
    environment:
        - POSTGRES_DB=${DB_NAME}
        - POSTGRES_USER=${DB_USER}
        - POSTGRES_PASSWORD=${DB_PASSWORD}
    volumes:
        - "./volumes/postgresql:/var/lib/postgresql/data"`

I tried adding this to the .env file, even though it worked without it before, but nothing changed.

SYMFONY_TRUSTED_PROXIES=172.16.2.10/22
SYMFONY_TRUSTED_HEADERS=forwarded,x-forwarded-for,x-forwarded-host,x-forwarded-proto,x-forwarded-port,x-forwarded-prefix

Can't find any log and have debug mode ON

Ths for help

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions