Swag reverse-proxy 400 Bad request error

[macoleman]

Hi,

I am exploring Firefly which looks very cool! However I can't get it to work from outside my local network.
It works fine on http://localhost:8080
When I go to https://myfireflyremoteurl:customport I get a 400 Bad request error.
I see in the Firefly container logs the same error:
"GET / HTTP/1.1" 400 392 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:126.0) Gecko/20100101 Firefox/126.0"

I am using SWAG and I have a specific problem with Firefly. I use other containers (Nextcloud, Homeassistant, Photoprism) with SWAG and they work.
I have tried a few different configs. This is my latest one:

docker-compose:

services:
  app:
    image: fireflyiii/core:latest
    hostname: app
    container_name: firefly
    restart: always
    volumes:
      - /media/xxxxxxxxxxxx/:/var/www/html/storage/upload
    env_file: firefly.env
    ports:
      - '8080:8080'
    depends_on:
      - db

firefly.subdomain.conf:

## Version 2023/05/31
# make sure that your firefly container is named firefly
# make sure that your dns has a cname set for firefly

server {
    listen 443 ssl http2;
    listen [::]:443 ssl http2;

    server_name firefly.*;

    include /config/nginx/ssl.conf;

    client_max_body_size 0;

    # enable for ldap auth (requires ldap-location.conf in the location block)
    #include /config/nginx/ldap-server.conf;

    # enable for Authelia (requires authelia-location.conf in the location block)
    #include /config/nginx/authelia-server.conf;

    # enable for Authentik (requires authentik-location.conf in the location block)
    #include /config/nginx/authentik-server.conf;

    location / {
        # enable the next two lines for http auth
        #auth_basic "Restricted";
        #auth_basic_user_file /config/nginx/.htpasswd;

        # enable for ldap auth (requires ldap-server.conf in the server block)
        #include /config/nginx/ldap-location.conf;

        # enable for Authelia (requires authelia-server.conf in the server block)
        #include /config/nginx/authelia-location.conf;

        # enable for Authentik (requires authentik-server.conf in the server block)
        #include /config/nginx/authentik-location.conf;

        include /config/nginx/proxy.conf;
        include /config/nginx/resolver.conf;
        set $upstream_app firefly;
        set $upstream_port 8080;
        set $upstream_proto http;
        proxy_pass $upstream_proto://$upstream_app:$upstream_port;
        
        proxy_set_header X-Forwarded-Proto $scheme;
        proxy_set_header X-Forwarded-Host $host;
        proxy_set_header X-Forwarded-Server $host;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header Host $host;
        proxy_set_header X-Forwarded-Port $server_port;
        
    }
}

I have set also in firefly.env

TRUSTED_PROXIES=** APP_URL=https://myfireflyremoteurl

I would really appreciate some help/advice on what I am doing wrong.

Thanks!

[JC5]

        set $upstream_app firefly;

Are you sure you can resolve firefly to the container name firefly?

[macoleman]

Thank you for the fast reply!
I am not sure, how can I check that?
But I have tried that setting also with the local server ip, 192.168.x.x, to no effect.

[JC5]

Mmm, it's difficult to say. Is there anything relevant in the config files that are included?