Config and install

[zoulouweb]

I'm setting up a CISO ASSISTANT instance on a virtual machine (running under VMWare). At this stage, I don't want to use TLS and I don't have a domain name — only an IP address.

I used make config to generate a docker-compose-custom.yml file, which I then modified with my parameters. Everything seems to be working fine, but when I try to sign in, I encounter the following errors:

FRONT END

TypeError: Cannot read properties of undefined (reading 'is_third_party')

    at file:///app/build/server/chunks/4-kdTfDuGm.js:5:19

    at file:///app/build/server/chunks/server-Cj-8Pjxf.js:13:32

    at file:///app/build/server/index.js:1091:16

    at AsyncLocalStorage.run (node:internal/async_local_storage/async_hooks:91:14)

    at with_event (file:///app/build/server/index.js:320:22)

    at load_server_data (file:///app/build/server/index.js:1089:24)

    at file:///app/build/server/index.js:2535:18

    at process.processTicksAndRejections (node:internal/process/task_queues:105:5)

BACKEND

2025-07-24T13:53:09.195819Z [warning  ] request_finished               [django_structlog.middlewares.request] ciso_assistant_url=http://MYIP:8080 code=401 ip=172.17.0.149 request=GET /api/applied-controls/per_status/ request_id=cf576827-2df1-4085-ace5-d02dab396c27 user_id=None
Unauthorized: /api/applied-controls/per_status/
Unauthorized: /api/applied-controls/per_status/
2025-07-24T13:53:09.199693Z [warning  ] request_finished               [django_structlog.middlewares.request] ciso_assistant_url=http://MYIP:8080 code=401 ip=172.17.0.149 request=GET /api/risk-assessments/per_status/ request_id=5e63b749-c407-4753-a5c2-573afbc041a9 user_id=None
Unauthorized: /api/risk-assessments/per_status/
Unauthorized: /api/risk-assessments/per_status/
2025-07-24T13:53:09.202995Z [warning  ] request_finished               [django_structlog.middlewares.request] ciso_assistant_url=http://MYIP:8080 code=401 ip=172.17.0.149 request=GET /api/compliance-assessments/per_status/ request_id=8aabd49a-2b00-4c3c-ac36-98d39f5cfae1 user_id=None
Unauthorized: /api/compliance-assessments/per_status/
Unauthorized: /api/compliance-assessments/per_status/
2025-07-24T13:53:09.205961Z [warning  ] request_finished               [django_structlog.middlewares.request] ciso_assistant_url=http://MYIP:8080 code=401 ip=172.17.0.149 request=GET /api/risk-scenarios/per_status/ request_id=0d2a39bb-cba7-4a6a-bd25-f9548d03975c user_id=None
Unauthorized: /api/risk-scenarios/per_status/
Unauthorized: /api/risk-scenarios/per_status/
2025-07-24T13:53:09.209157Z [warning  ] request_finished               [django_structlog.middlewares.request] ciso_assistant_url=http://MYIP:8080 code=401 ip=172.17.0.149 request=GET /api/risk-matrices/used/ request_id=8fdec5c3-c2c1-42b5-8ff2-dc02d682a33b user_id=None
Unauthorized: /api/risk-matrices/used/
Unauthorized: /api/risk-matrices/used/
2025-07-24T13:53:09.212636Z [warning  ] request_finished               [django_structlog.middlewares.request] ciso_assistant_url=http://MYIP:8080 code=401 ip=172.17.0.149 request=GET /api/frameworks/used/ request_id=6db7a776-196d-40cf-899b-963f7189af47 user_id=None
Unauthorized: /api/frameworks/used/
Unauthorized: /api/frameworks/used/


ip=172.17.0.147 -> Container

My Docker-compose-custom

services:
  postgres:
    container_name: postgres
    image: postgres:16
    pull_policy: always
    restart: always
    environment:
      POSTGRES_DB: ciso_assistant
      POSTGRES_USER: myuser
      POSTGRES_PASSWORD: mysecret
    volumes:
      - ./db/pg:/var/lib/postgresql/data
    healthcheck:
      test: ["CMD-SHELL", "pg_isready -U ciso_assistant -d ciso_assistant"]
      interval: 10s
      timeout: 5s
      retries: 5
      start_period: 30s
  backend:
    container_name: backend
    image: ghcr.io/intuitem/ciso-assistant-community/backend:latest
    pull_policy: always
    restart: always
    depends_on:
      postgres:
        condition: service_healthy
    environment:
      - ALLOWED_HOSTS=backend,localhost,MYIP
      - CISO_ASSISTANT_URL=http://MYIP:8080
      - DJANGO_DEBUG=True
      - AUTH_TOKEN_TTL=7200
      - POSTGRES_DB: ciso_assistant
      - POSTGRES_USER: myuser
      - POSTGRES_PASSWORD: mysecret
      - DB_HOST=postgres
    volumes:
      - ./db:/code/db
    healthcheck:
      test: ["CMD-SHELL", "curl -f http://backend:8000/api/build || exit 1"]
      interval: 10s
      timeout: 5s
      retries: 20
      start_period: 100s
  huey:
    container_name: huey
    image: ghcr.io/intuitem/ciso-assistant-community/backend:latest
    pull_policy: always
    depends_on:
      backend:
        condition: service_healthy
    restart: always
    environment:
      - ALLOWED_HOSTS=backend,localhost,MYIP
      - CISO_ASSISTANT_URL=http://MYIP:8080
      - DJANGO_DEBUG=False
      - AUTH_TOKEN_TTL=7200
      - POSTGRES_DB: ciso_assistant
      - POSTGRES_USER: myuser
      - POSTGRES_PASSWORD: mysecret
      - DB_HOST=postgres
    volumes:
      - ./db:/code/db
    entrypoint:
      - /bin/sh
      - -c
      - |
        poetry run python manage.py run_huey -w 2 --scheduler-interval 60
  frontend:
    container_name: frontend
    environment:
      - PUBLIC_BACKEND_API_URL=http://backend:8000/api
      - PUBLIC_BACKEND_API_EXPOSED_URL=http://MYIP:8080/api
      - PROTOCOL_HEADER=x-forwarded-proto
      - HOST_HEADER=x-forwarded-host
    image: ghcr.io/intuitem/ciso-assistant-community/frontend:latest
    pull_policy: always
    depends_on:
      backend:
        condition: service_healthy
  caddy:
    container_name: caddy
    image: caddy:2.10.0
    environment:
      - CISO_ASSISTANT_URL=http://MYIP:8080
    depends_on:
      backend:
        condition: service_healthy
    restart: unless-stopped
    ports:
      - 8080:8080
    volumes:
      - ./caddy_data:/data
    command: |
      sh -c 'echo $$CISO_ASSISTANT_URL "{
      reverse_proxy /api/* backend:8000
      reverse_proxy /* frontend:3000
      }" > Caddyfile && caddy run'

Something wrong ? Can you help me ?