Public hostname not working for mobile (android) app | Immich | Page 1

split condor Apr 14, 2023, 12:10 PM

#

I have added a public domain through Cloudflare which works perfectly for the web access, but when I try to setup the server endpoint URL (https://my.public.link) through the app and authenticate with my credentials, I always get an error to check the link, username or password.
The last 2 are, of course, correct. The app works normally when I use my local http://ip:2383. App version is v1.53.0. Attached the .env and .yml files.

Probably I'm missing something, but curious as to what as I seem to have followed all the relevant instructions.

Edit: updated title to more relevant since IMMICH_API_URL_EXTERNAL is not related to this.

📎 env 📎 docker-compose.yml

umbral shard Apr 14, 2023, 12:11 PM

#

You only need to set that env var if you're running a nonstandard deployment, a normal reverse proxy setup should work without it

split condor Apr 14, 2023, 12:16 PM

#

umbral shard You only need to set that env var if you're running a nonstandard deployment, a ...

okay, so I commented this line out and run docker compose up -d but nothing changed really with the error in the app. Could it be something different to look at?

umbral shard Apr 14, 2023, 12:16 PM

#

Can you check whether it works if you add /api?

#

And what is the output of https://my.public.link/.well-known/immich ?

split condor Apr 14, 2023, 12:18 PM

#

{"api":{"endpoint":"/api"}}

Already tried the /api before but didn't work.

near mirage Apr 14, 2023, 12:29 PM

#

It is a valid SSL certificate, right? A bad certificate is one reason the web might work and the mobile app won't.

split condor Apr 14, 2023, 12:35 PM

#

seems like it, yes

umbral shard Apr 14, 2023, 12:35 PM

#

Is it also from a trusted CA?

split condor Apr 14, 2023, 12:35 PM

#

#

I think cloudflare etc. takes care of these, that's why i went with this as a first step for testing before I start digging more into better options

umbral shard Apr 14, 2023, 12:45 PM

#

Can you get the log file from the app and post it here?

split condor Apr 14, 2023, 12:57 PM

#

The Logs option from the app doesn't seem to capture anything relevant and same from docker. Not sure if I'm looking at the right place though.

umbral shard Apr 14, 2023, 12:58 PM

#

That's the spot. I'm pretty sure it's supposed to log auth problems 🤔

near mirage Apr 14, 2023, 12:58 PM

#

It's never logged auth errors iirc

umbral shard Apr 14, 2023, 12:59 PM

#

near mirage It's never logged auth errors iirc

https://github.com/immich-app/immich/blob/main/mobile/lib/modules/login/providers/authentication.provider.dart#L71

#

Or is that not the user-visible logger?

near mirage Apr 14, 2023, 12:59 PM

#

Which has made debugging this exact situation a pain.

umbral shard Apr 14, 2023, 12:59 PM

#

Yup

near mirage Apr 14, 2023, 12:59 PM

#

That might not write anything to the user log

split condor Apr 14, 2023, 2:55 PM

#

Public hostname not working for mobile (android) app

split condor Apr 15, 2023, 1:57 PM

#

update: I've also put a layer OIDC (authentik) which, again, works for web access but nothing changed for the mobile app. I have tried including app.immich:/ and without it + enable "REDIRECT URI OVERRIDE"

near mirage Apr 15, 2023, 1:59 PM

#

Are you using any other DNS related service from cloudflare?

split condor Apr 15, 2023, 2:09 PM

#

I would say no. Just a basic free account only for immich and authentik for now

near mirage Apr 15, 2023, 2:25 PM

#

Does it work on the phone on mobile data, not on your local wifi?

split condor Apr 15, 2023, 2:27 PM

#

the localhost works normally on the app and on wifi. when I switch to the public domain I get these errors in the app. The web access of the public domain works normally outside the home network

near mirage Apr 15, 2023, 2:28 PM

#

Idk. The only thing that i can think of would be a certificate related problem. Connectivity seems to be fine.

#

Unfortunately the debugging info for those types of errors is missing from the logs right now

#

If you add /api on the end does that change anything?

split condor Apr 15, 2023, 2:42 PM

#

nope

near mirage Apr 15, 2023, 2:42 PM

#

Can you successfully run this

openssl s_client -debug -connect www.thedomaintocheck.com:443

split condor Apr 15, 2023, 2:53 PM

#

sorry for the delay, had to troubleshoot why openssl wasn't running but after I figured that out looks like it runs normally

split condor Apr 15, 2023, 3:35 PM

#

it's also strange that while the Login with OAuth option is available when using localhost in the app, when I use again the public host (incl. all variations) it doesn't show anymore. Let me know if this is any hint, else I guess my only choice is to replace cloudflare tunnel with something else.

near mirage Apr 15, 2023, 3:56 PM

#

That makes sense as the http request to get the OAuth settings is probably failing

#

Probably for the same reason the login request fails

#

Does your phone use a proxy or custom DNS server or settings?

split condor Apr 15, 2023, 4:02 PM

#

I did have a private dns configured on the phone, but I removed it and unfortunately didn't help. nice catch, though. It did give me hope for a second 😅

near mirage Apr 15, 2023, 4:04 PM

#

Cached maybe?

split condor Apr 15, 2023, 4:11 PM

#

i see that cached dns on android is only on the browser-level, would it affect the app login? I did uninstall & restart though

#

also cleared the cache for the app & browsers but nothing new

near mirage Apr 15, 2023, 4:59 PM

#

Probably not that then 😁

errant egret Jun 4, 2023, 4:14 PM

#

Bumping this thread since i'm facing the same issue: Can access photos.jeromestephan.de on the web no problem, but with the android app I'm getting a 404 not found as it tries to hit photos.jeromestephan.de/api/.well-known/immich

near mirage Jun 4, 2023, 5:44 PM

#

Anything in the mobile app logs?

errant egret Jun 5, 2023, 2:26 PM

#

near mirage Anything in the mobile app logs?

Sadly nothing at all. Just if I'm running httpry on the server I see that that it tries to hit that and gives back a 404

errant egret Jun 6, 2023, 7:39 PM

#

update: After using https instead of http it seems to work. Sometimes its the little mistakes...

#Public hostname not working for mobile (android) app