"Error: 403 - undefined" when accessing frontend remotely
When I first try to access Immich at mydomain (logged in from previous session) it hangs on the loading spin wheel. If I refresh a few times, eventually it will return the error below, and then if I refresh a few more timesI am able to access the Immich frontend. I tried clearing cache and the issue persists. I can't tell what's going wrong here so not sure what else to troubleshoot.
I am running Immich via docker-compose on an Unraid box. Both Immich and Unraid have been updated to latest releases.
9 Replies
:wave: Hey @jcub,
Thanks for reaching out to us. Please carefully read this message and follow the recommended actions. This will help us be more effective in our support effort and leave more time for building Immich :immich:.
References
- Container Logs:
docker compose logs
docs
- Container Status: docker ps -a
docs
- Reverse Proxy: https://immich.app/docs/administration/reverse-proxy
- Code Formatting https://support.discord.com/hc/en-us/articles/210298617-Markdown-Text-101-Chat-Formatting-Bold-Italic-Underline#h_01GY0DAKGXDEHE263BCAYEGFJA
Checklist
I have...
1. :ballot_box_with_check: verified I'm on the latest release(note that mobile app releases may take some time).
2. :ballot_box_with_check: read applicable release notes.
3. :ballot_box_with_check: reviewed the FAQs for known issues.
4. :ballot_box_with_check: reviewed Github for known issues.
5. :ballot_box_with_check: tried accessing Immich via local ip (without a custom reverse proxy).
6. :ballot_box_with_check: uploaded the relevant information (see below).
7. :ballot_box_with_check: tried an incognito window, disabled extensions, cleared mobile app cache, logged out and back in, different browsers, etc. as applicable
(an item can be marked as "complete" by reacting with the appropriate number)
Information
In order to be able to effectively help you, we need you to provide clear information to show what the problem is. The exact details needed vary per case, but here is a list of things to consider:
- Your docker-compose.yml and .env files.
- Logs from all the containers and their status (see above).
- All the troubleshooting steps you've tried so far.
- Any recent changes you've made to Immich or your system.
- Details about your system (both software/OS and hardware).
- Details about your storage (filesystems, type of disks, output of commands like fdisk -l
and df -h
).
- The version of the Immich server, mobile app, and other relevant pieces.
- Any other information that you think might be relevant.
Please paste files and logs with proper code formatting, and especially avoid blurry screenshots.
Without the right information we can't work out what the problem is. Help us help you ;)
If this ticket can be closed you can use the /close
command, and re-open it later if needed.Accessing Immich locally did not reproduce the issue, however accessing it remotely via a different browser/incognito/etc does produce the issue.
No relevant errors in the logs
I'm using cloudflare tunnel for the proxy
I assume you have some auth or something in front of immich blocking requests. 403 is permission denied
What do you see when you first open immich in a fresh incognito window?
no auth in front of immich. incognito window produces the same result. the logo will spin endlessly unless i refresh a couple times. then during login i received a 403. tried again and eventually got in and was presented with this error:
apologies for the very delayed response. appreciate your help here
Please share your reverse proxy config
Are you using any blocking tools like fail2ban etc?
I'm using a cloudflare tunnel with all the default settings. No reverse proxy config so to speak, and not using a blocking tool. Now that you mention it I'm going to add fail2ban right away. Foolishly I thought it already limited logins.
ok that’s not going to help this issue though
This is probably a cloudflare or caching related issue, not immich
Ok thanks, I'll try removing the tunnel from the equation temporarily and see if that fixes it.
This thread has been closed. To re-open, use the button below.