Unable to add passkey (1Password)

F

fabienne•8/21/24, 7:28 AM

can you send the exact error code?

F

fabienne•8/21/24, 11:09 AM

yes exactly

F

FFO•8/26/24, 12:50 AM

Can you share a little about your self-hosting setup?

We have seen some problems with nginx configs.

F

FFO•8/26/24, 10:31 PM

Hm can you share your nginx config?

We had trouble in the past that the ports where wrongly forwarded to zitadel.

F

FFO•8/27/24, 11:10 PM

Looking at this piece, is your server TLS to the outside world?
It looks like you have TLS setup towards zitadel from nginx only?

    root /var/www/html;

    #Which domain names will this vhost respond to
    server_name XXX;

    access_log /var/log/nginx/rp_XXX_access.log;
    error_log  /var/log/nginx/rp_XXX_error.log error;

    location / {
        grpc_pass grpcs://192.168.XXX.XX:8080;
        grpc_set_header Host $host:$server_port;
    }

    root /var/www/html;

    #Which domain names will this vhost respond to
    server_name XXX;

    access_log /var/log/nginx/rp_XXX_access.log;
    error_log  /var/log/nginx/rp_XXX_error.log error;

    location / {
        grpc_pass grpcs://192.168.XXX.XX:8080;
        grpc_set_header Host $host:$server_port;
    }

    root /var/www/html;

    #Which domain names will this vhost respond to
    server_name XXX;

    access_log /var/log/nginx/rp_XXX_access.log;
    error_log  /var/log/nginx/rp_XXX_error.log error;

    location / {
        grpc_pass grpcs://192.168.XXX.XX:8080;
        grpc_set_header Host $host:$server_port;
    }

    root /var/www/html;

    #Which domain names will this vhost respond to
    server_name XXX;

    access_log /var/log/nginx/rp_XXX_access.log;
    error_log  /var/log/nginx/rp_XXX_error.log error;

    location / {
        grpc_pass grpcs://192.168.XXX.XX:8080;
        grpc_set_header Host $host:$server_port;
    }

F

FFO•8/30/24, 11:59 PM

Hm ok, you did set externalport=443 then in zitadel?

F

FFO•9/9/24, 11:59 AM

Hm can you try what happens if you set

grpc_set_header Host $host:443;

grpc_set_header Host $host:443;

grpc_set_header Host $host:443;

grpc_set_header Host $host:443;

F

FFO•9/9/24, 2:35 PM

hm, if you open your browser developer menu (f12) are there any errors?

F

FFO•9/10/24, 8:38 AM

Hm is there a way I can get access to a user in this system to try and debug this?

F

FFO•9/10/24, 3:03 PM

Can we test the setup without TLS from nginx to zitadel?
ZITADEL_EXTERNALSECURE=false

F

FFO•9/10/24, 3:04 PM

grpc_pass grpc://192.168.XXX.XX:8080;

F

FFO•9/11/24, 6:37 AM

ah yes you are correct.

one thing though, can you share what parameters you pass as ARG in the compose?

F

FFO•9/11/24, 12:48 PM

I meant this piece

    command: 'start-from-init --masterkey "MasterkeyNeedsToHave32Characters" --tlsMode disabled'

command: 'start-from-init --masterkey "MasterkeyNeedsToHave32Characters" --tlsMode disabled'

    command: 'start-from-init --masterkey "MasterkeyNeedsToHave32Characters" --tlsMode disabled'

command: 'start-from-init --masterkey "MasterkeyNeedsToHave32Characters" --tlsMode disabled'

F

FFO•9/18/24, 9:03 AM

Sadly not no, but can you try adding

--tlsMode external

--tlsMode external

--tlsMode external

--tlsMode external to the start-from-setup command?

F

FFO•9/25/24, 11:05 AM

I thought that maybe precende is a problem here.

F

FFO•9/25/24, 11:06 AM

Since we are out of luck here :sads:

Can you make me a bundle i can run locally to reproduce your exact setup?

F

FFO•9/26/24, 11:08 AM

you could share the same files you use to start zitadel on your end with me.

i do not need masterkey and domain, but proxy, docker, zitadel config would help

F

FFO•9/26/24, 12:28 PM

No worries, I can adopt that.

But since I cannot recreate its kind of my last hunch

F

FFO•10/4/24, 1:13 PM

Ah yeah that is perfectly enough

F

FFO•10/4/24, 6:32 PM

I give them a spin

F

FFO•10/11/24, 6:32 PM

Will have this weekend, sorry but my days where a little busy

F

FFO•11/14/24, 5:29 PM

Hi

I finally have some time again for this. I will look into it again in the next 24h

F

FFO•11/15/24, 8:05 AM

So I tried some things.

What happens if you use

    location / {
        grpc_pass grpc://192.168.210.21:8080;
        grpc_set_header Host $host;
    }

    location / {
        grpc_pass grpc://192.168.210.21:8080;
        grpc_set_header Host $host;
    }

    location / {
        grpc_pass grpc://192.168.210.21:8080;
        grpc_set_header Host $host;
    }

    location / {
        grpc_pass grpc://192.168.210.21:8080;
        grpc_set_header Host $host;
    }

With that I could it make work with our default compose example, not yours though.
I have not yet found out why that is so.

What happens if you try to use our default compose example on one machine?