Proxy headers/networking switching not working
I'm unsure of when exactly the connection stopped working but I noticed it after updating my iPhone to iOS 26. Now when I'm off my home network Immich fails to connect to my server through my external endpoint which is a proxied address and leverages proxy headers to bypass manual auth needs. Now it just fails.
I'm running the latest version of both Immich Server and Mobile app 1.142.1. On my iPhone I can still access the web UI no problem when external just the app is failing.
7 Replies
:wave: Hey @crzyitaliano,
Thanks for reaching out to us. Please carefully read this message and follow the recommended actions. This will help us be more effective in our support effort and leave more time for building Immich :immich:.
References
- Container Logs:
docker compose logs docs
- Container Status: docker ps -a docs
- Reverse Proxy: https://immich.app/docs/administration/reverse-proxy
- Code Formatting https://support.discord.com/hc/en-us/articles/210298617-Markdown-Text-101-Chat-Formatting-Bold-Italic-Underline#h_01GY0DAKGXDEHE263BCAYEGFJA
Checklist
I have...
1. :ballot_box_with_check: verified I'm on the latest release(note that mobile app releases may take some time).
2. :ballot_box_with_check: read applicable release notes.
3. :ballot_box_with_check: reviewed the FAQs for known issues.
4. :ballot_box_with_check: reviewed Github for known issues.
5. :ballot_box_with_check: tried accessing Immich via local ip (without a custom reverse proxy).
6. :ballot_box_with_check: uploaded the relevant information (see below).
7. :ballot_box_with_check: tried an incognito window, disabled extensions, cleared mobile app cache, logged out and back in, different browsers, etc. as applicable
(an item can be marked as "complete" by reacting with the appropriate number)
Information
In order to be able to effectively help you, we need you to provide clear information to show what the problem is. The exact details needed vary per case, but here is a list of things to consider:
- Your docker-compose.yml and .env files.
- Logs from all the containers and their status (see above).
- All the troubleshooting steps you've tried so far.
- Any recent changes you've made to Immich or your system.
- Details about your system (both software/OS and hardware).
- Details about your storage (filesystems, type of disks, output of commands like fdisk -l and df -h).
- The version of the Immich server, mobile app, and other relevant pieces.
- Any other information that you think might be relevant.
Please paste files and logs with proper code formatting, and especially avoid blurry screenshots.
Without the right information we can't work out what the problem is. Help us help you ;)
If this ticket can be closed you can use the /close command, and re-open it later if needed.
Successfully submitted, a tag has been added to inform contributors. :white_check_mark:#15230 maybe can mention there, this feature is experimental support
Is it the networking switching that is experimental? or the proxy header support?
The reason I ask is even if I only use my proxied address as the server address and disable the networking switching it still fails to connect with my proxy headers. I did check my proxy as well and I'm not seeing any failed attempts.
Proxy headers are experimental
Ah got it. Well I figured it out on my end. I enabled debug logging on my proxy for fun and found the issue. The expected proxy header name changed on my proxy side and Immich was using the old ones I had configured before. After updating the headers the tokens worked again and the app can talk to Immich over external network again. Sorry to bother you all!
This thread has been closed. To re-open, use the button below.