sinful swallow Feb 8, 2026, 8:37 PM

#

Hi, I recently moved to a new machine, and switched from nginx to swag. When I or any of my users try to log into Jellyseerr via the reverse proxy (subdomain), after the Plex login window pops up and we log in, it takes us back to the login screen instead of the Jellyseerr main page. If I go via IP:port, it works fine.

The logs (debug level) do not seem to be logging anything surrounding a login attempt.

This was working perfectly well in nginx, and I'm using the swag template for Jellyseerr.

Is there anything I can change to get this working? My Swag subdomain config is here: https://gist.github.com/PearsonFlyer/7cf91569cb583a4ae07a534a49d27f80

I'm on Unraid 7.2.3, using the Seerr docker container from Hotio, running Seerr version 2.7.3 Stable.

Thanks!

Gist

gist:7cf91569cb583a4ae07a534a49d27f80

GitHub Gist: instantly share code, notes, and snippets.

cobalt sable Feb 8, 2026, 8:41 PM

#

Do you have a link to this swag template ?

sinful swallow Feb 8, 2026, 8:48 PM

#

Here's the sample configuration template included in Swag's setup. https://gist.github.com/PearsonFlyer/83186b484299d3316faefe1a855314b4

Gist

gist:83186b484299d3316faefe1a855314b4

GitHub Gist: instantly share code, notes, and snippets.

#

I'm running this on request.mydomain.com in this case.

cobalt sable Feb 8, 2026, 8:49 PM

#

Do you know if there's any CSP headers involved ?

sinful swallow Feb 8, 2026, 8:50 PM

#

If it matters, I'm running several other subdomain sites, and those work fine, it's just this. I do not know about CSP headers. 🙁

#

I haven't set anything up specifically for that. It's just a really basic swag reverse proxy.

obsidian frigate Feb 8, 2026, 8:54 PM

#

that config looks wrong. are you using the template provided by swag?

#

this is all you need ```## Version 2025/07/18

make sure that your jellyseerr container is named jellyseerr

make sure that your dns has a cname set for jellyseerr

server {
listen 443 ssl;

listen 443 quic;

listen [::]:443 ssl;

listen [::]:443 quic;

server_name jellyseerr.*;

include /config/nginx/ssl.conf;

client_max_body_size 0;

# enable for ldap auth (requires ldap-location.conf in the location block)
#include /config/nginx/ldap-server.conf;

# enable for Authelia (requires authelia-location.conf in the location block)
#include /config/nginx/authelia-server.conf;

# enable for Authentik (requires authentik-location.conf in the location block)
#include /config/nginx/authentik-server.conf;

# enable for Tinyauth (requires tinyauth-location.conf in the location block)
#include /config/nginx/tinyauth-server.conf;

location / {
    # enable the next two lines for http auth
    #auth_basic "Restricted";
    #auth_basic_user_file /config/nginx/.htpasswd;

    # enable for ldap auth (requires ldap-server.conf in the server block)
    #include /config/nginx/ldap-location.conf;

    # enable for Authelia (requires authelia-server.conf in the server block)
    #include /config/nginx/authelia-location.conf;

    # enable for Authentik (requires authentik-server.conf in the server block)
    #include /config/nginx/authentik-location.conf;

    # enable for Tinyauth (requires tinyauth-server.conf in the server block)
    #include /config/nginx/tinyauth-location.conf;

    include /config/nginx/proxy.conf;
    include /config/nginx/resolver.conf;
    set $upstream_app jellyseerr;
    set $upstream_port 5055;
    set $upstream_proto http;
    proxy_pass $upstream_proto://$upstream_app:$upstream_port;

}

}

sinful swallow Feb 8, 2026, 8:55 PM

#

Thanks, trying that now.

obsidian frigate Feb 8, 2026, 8:56 PM

#

ofc if you use authentik or authellia uncomment those and make sure if your container isnt named jellyseerr to change it

sinful swallow Feb 8, 2026, 9:01 PM

#

I do not use either of those. But this is doing the same behavior. I made 2 changes - server name request.* and set $upstream_app 192.168.1.243 instead of jellyseerr.

obsidian frigate Feb 8, 2026, 9:01 PM

#

is swag on the same network as jellyseerr?

sinful swallow Feb 8, 2026, 9:02 PM

#

It is, yes.

obsidian frigate Feb 8, 2026, 9:02 PM

#

then you can use the name just fine. so you hit login and it just takes you back to the login page?

sinful swallow Feb 8, 2026, 9:02 PM

#

Correct.

obsidian frigate Feb 8, 2026, 9:03 PM

#

try in a incog window

#

assuming your using chrome

sinful swallow Feb 8, 2026, 9:04 PM

#

I'm using firefox, trying a private window, though all of my users are having the same behavior happen.

obsidian frigate Feb 8, 2026, 9:05 PM

#

if private window doesnt work try enabling proxy support under settings>network

#

also check your swag access/error log to see if theres anything useful

sinful swallow Feb 8, 2026, 9:13 PM

#

No luck. Access log shows just a normal request, no error entries.

obsidian frigate Feb 8, 2026, 9:13 PM

#

enabled the proxy support?

sinful swallow Feb 8, 2026, 9:13 PM

#

Doing that next.

obsidian frigate Feb 8, 2026, 9:14 PM

#

is this cloudflare based?

sinful swallow Feb 8, 2026, 9:15 PM

#

Ah, yes, I neglected to mention that. This is using a CF front end.

obsidian frigate Feb 8, 2026, 9:15 PM

#

with proxy on?

sinful swallow Feb 8, 2026, 9:15 PM

#

Sorry about that, I meant to include it in my initial post and forgot about that.

#

I just turned proxy on, going to try that as soon as it comes back up.

#

Seems like it takes about 5 minutes after a restart of the container, even though the log says it's listening.

obsidian frigate Feb 8, 2026, 9:16 PM

#

thats odd.

sinful swallow Feb 8, 2026, 9:17 PM

#

The IP:port immediately responds, but the domain doesn't.

obsidian frigate Feb 8, 2026, 9:18 PM

#

also with swag i recommend using the docker mods such linuxserver/mods:swag-auto-reload

#

that way you dont have to restart swag after every change

#

what repo are you using for seerr?

#

is it ghcr.io/seerr-team/seerr:develop

sinful swallow Feb 8, 2026, 9:20 PM

#

I have swag watching for conf changes and reloading automatically so it doesn't need a restart every time.

#

Using ⁨ghcr.io/hotio/seerr:latest⁩

#

I can switch if you think that's better for me.

obsidian frigate Feb 8, 2026, 9:21 PM

#

hmm id try switching, this could be something on hotio image.

sinful swallow Feb 8, 2026, 9:21 PM

#

On it.

obsidian frigate Feb 8, 2026, 9:21 PM

#

because im using the same setup with the config above and dont have this issue

sinful swallow Feb 8, 2026, 9:27 PM

#

Having some trouble getting it to come back up. Looks like hotio uses /config and the seerr container uses /app/config. Working on it.

obsidian frigate Feb 8, 2026, 9:29 PM

#

yeah just need to change the container path

sinful swallow Feb 8, 2026, 9:32 PM

#

Same behavior. Works great on ip:port, never gets off login screen on rp subdomain.

#

After doing the plex login, the plex login button text changes though.

cobalt sable Feb 8, 2026, 9:34 PM

#

Do you see anything in your browser dev console when connecting ?

sinful swallow Feb 8, 2026, 9:34 PM

#

Let me check that.

obsidian frigate Feb 8, 2026, 9:36 PM

#

idk if this will help but make sure your ssl is set to strict on CF

sinful swallow Feb 8, 2026, 9:37 PM

#

I'll check that too.

obsidian frigate Feb 8, 2026, 9:41 PM

#

did you make sure enable plex sign-in is enabled?

#

the above looks like the local sign in screen

#

also did you import the users?

sinful swallow Feb 8, 2026, 9:45 PM

#

Before I try to use Plex login, the bottom button says "Sign in with Plex", but after I do that it changes to what you see, where the text is "Seerr Seerr".

#

The users are all there.

#

Here is network console when connecting.

obsidian frigate Feb 8, 2026, 9:45 PM

#

thats strange, plex login should redirect you to plex

sinful swallow Feb 8, 2026, 9:46 PM

#

obsidian frigate Feb 8, 2026, 9:46 PM

#

try disabling local login

sinful swallow Feb 8, 2026, 9:47 PM

#

It did pop up a Plex login box. I clicked log in on that, and it brought me back to the login screen, as shown.

#

Initial login screen:

#

When I click Login with Plex, it pops up the box and I log in. It brings me back to this, but the text in the box changes to Seerr Seerr.

#

obsidian frigate Feb 8, 2026, 9:59 PM

#

yeah its redirecting to the local login screen for some reason, did you disable local login?

sinful swallow Feb 8, 2026, 9:59 PM

#

I did, you can see that in the initial login screen before doing the plex login.

obsidian frigate Feb 8, 2026, 10:00 PM

#

thats odd. is this a fresh install?

sinful swallow Feb 8, 2026, 10:00 PM

#

It is not a fresh install, I've been running it for at least a year. But I recently moved my setup over from a Windows box using nginx to an Unraid box using Swag.

#

Luckily most of my users had been logged in, so their watchlist adds still work for requests.

obsidian frigate Feb 8, 2026, 10:01 PM

#

is pihole or anything on the network blocking requests?

sinful swallow Feb 8, 2026, 10:01 PM

#

No pihole, no adguard, nothing like that in play.

#

I recently added fail2ban to swag, but it was behaving this way prior to that.

obsidian frigate Feb 8, 2026, 10:02 PM

#

above you said you changed it to a ip address. are you using a custom docker network? or host

sinful swallow Feb 8, 2026, 10:02 PM

#

I'm using a custom docker network, all media-related apps are in it (including swag and seerr).

obsidian frigate Feb 8, 2026, 10:03 PM

#

this is tedious but try stopping your container and adding a second fresh one and see if it works. i suspect its something with your setup

sinful swallow Feb 8, 2026, 10:03 PM

#

All this stuff is connectable and good using container names.

obsidian frigate Feb 8, 2026, 10:04 PM

#

and all other apps are working via swag?

sinful swallow Feb 8, 2026, 10:04 PM

#

I'll try a brand new seerr install and see if that does the trick. That might take a bit, I'll be back to report either way. Thank you again for all the help and suggestions.

#

Yep. I have a mix of subdomain and baseurl, and all work fine.

obsidian frigate Feb 8, 2026, 10:05 PM

#

yeah thats the only thing i can think of. you dont have this enabled do you i dont think it would affect just logging in via rp tho

sinful swallow Feb 8, 2026, 10:05 PM

#

I'm a mod for the arrs, so I'm generally fairly knowledgeable about this stuff, which is why it's killing me that I can't make this work 🙂

obsidian frigate Feb 8, 2026, 10:06 PM

#

i know you've helped me quite a bit on the arr side. thought i was gonna be able to return the favor 🙁

sinful swallow Feb 8, 2026, 10:06 PM

#

I have very little experience with Swag, which is what's confounding me. But I'll try a new install, it's likely something I messed up somewhere along the line and didn't notice until this.

obsidian frigate Feb 8, 2026, 10:07 PM

#

shouldnt be to bad to throw another container up just for testing. but thats really the last thing i can think of tho im sure a dev would have more testing to try. sorry i couldnt get this resolved..

sinful swallow Feb 8, 2026, 10:08 PM

#

np. thank you. I'll be back either way to let you know if it worked or not. If it works, I'll just start fresh.

#

I had Seerr open in another window sitting at the login screen, and it worked. I'm entirely flummoxed now 🙂 But also not looking a gift horse in the mouth. I think that, eventually, the unchecking the local login option worked.

#

I'm now unable to connect it to Plex, but I'll figure that one out. ⁨{ "errorMessage": "EACCES: permission denied, rename '/app/config/settings.json.tmp' -> '/app/config/settings.json'" }⁩ but I don't have a settings.json.tmp file.

#

(I do have a settings.old.json file though)

obsidian frigate Feb 8, 2026, 10:15 PM

#

Do you have a settings.json? If so I’d delete the others

sinful swallow Feb 8, 2026, 10:15 PM

#

I do, will do.

obsidian frigate Feb 8, 2026, 10:17 PM

#

After see if that error is gone

#

Also try logging in via your phone or something else

sinful swallow Feb 8, 2026, 10:17 PM

#

Now it crashes on startup with ⁨{ "errorMessage": "EACCES: permission denied, rename '/app/config/settings.json.tmp' -> '/app/config/settings.json'" }⁩

#

Oops, wrong thing. Hang on.

#

⁨2026-02-08T22:17:16.227Z [info]: Commit Tag: dbee2fdf9f1a476e730b5bb000cc53d1875ee29b 2026-02-08T22:17:16.467Z [info]: Starting Seerr version develop-dbee2fdf9f1a476e730b5bb000cc53d1875ee29b 2026-02-08T22:17:16.723Z [error][Settings Migrator]: Something went wrong while running settings migrations: EACCES: permission denied, open '/app/config/settings.old.json' 2026-02-08T22:17:16.723Z [error][Settings Migrator]: A common cause for this issue is a permission error of your configuration folder. ⁩

#

Should I copy settings.json to settings.old.json?

obsidian frigate Feb 8, 2026, 10:19 PM

#

What’s owner and permissions of the files?

sinful swallow Feb 8, 2026, 10:20 PM

#

99:100 (nobody:users), typical unraid stuff. That's also the pgid and puid running the container.

obsidian frigate Feb 8, 2026, 10:20 PM

#

Nope doesn’t work with seerr

sinful swallow Feb 8, 2026, 10:21 PM

#

No? What should they be then?

obsidian frigate Feb 8, 2026, 10:21 PM

#

Do you have these set in the template?

sinful swallow Feb 8, 2026, 10:21 PM

#

That was my holdover from hotio, where it works.

#

I do, but I can remove them and chown the app/config folder.

obsidian frigate Feb 8, 2026, 10:22 PM

#

~~Seerr runs as root now~~

sinful swallow Feb 8, 2026, 10:22 PM

#

Got it, will fix that right now.

obsidian frigate Feb 8, 2026, 10:23 PM

#

Sorry not root 🤦🏼‍♂️

#

so chown -R 1000:1000 /mnt/user/appdata/seerr

#

Tho if hotio supports user:nobody that is more inline with unraid.

sinful swallow Feb 8, 2026, 10:27 PM

#

That fixed the Plex issue, and I can log in now, so I think that all fixed me up.

obsidian frigate Feb 8, 2026, 10:27 PM

#

Nice! The errors gone for settings.json?

sinful swallow Feb 8, 2026, 10:28 PM

#

Looks like it, yes.

obsidian frigate Feb 8, 2026, 10:28 PM

#

Good deal glad we got it sorted

#Cannot log in via reverse proxy using Plex login creds

make sure that your jellyseerr container is named jellyseerr

make sure that your dns has a cname set for jellyseerr

listen 443 quic;

listen [::]:443 quic;