404 on .within.website/x/cmd/anubis/api/

[drewcassidy]

I migrated my forgejo server from arch to fedora, and now when I try to get anubis running, any URL redirects to something like https://git.offworldcolonies.nexus/.within.website/x/cmd/anubis/api/pass-challenge?response=00278c841a1da8f5200ac0fe3efba898a25e713167baf39fad575905b27245b7&nonce=62&redir=https%3A%2F%2Fgit.offworldcolonies.nexus%2F&elapsedTime=6 which just serves 404 page not found

The 404 doesnt seem to be served by nginx or forgejo but I could be wrong. The 404s don't show up in forge's logs and nginx's debug logs seem to show it proxying the 404.

This setup worked before, but that was a different distro so could be packaging differences? I was also using anubis built directly from the main branch before, now I'm using Anubis 1.21.3

my nginx configuration is:

# TLS termination server - forwards to anubis
server {
    listen 443 ssl;
    listen [::]:443 ssl;

    server_name git.offworldcolonies.nexus;

    http2 on;

    client_max_body_size 512M;
    proxy_set_header Host $host;
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Http-Version $server_protocol;

    location / {
       proxy_pass http://unix:/run/forgejo/anubis/anubis.sock;
    }

    ssl_certificate /etc/letsencrypt/live/git.offworldcolonies.nexus/fullchain.pem; # managed by Certbot
    ssl_certificate_key /etc/letsencrypt/live/git.offworldcolonies.nexus/privkey.pem; # managed by Certbot
    include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
    ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
}

and my anubis environment is

COOKIE_DOMAIN=offworldcolonies.nexus
PUBLIC_URL=https://git.offworldcolonies.nexus
REDIRECT_DOMAINS=https://git.offworldcolonies.nexus
DIFFICULTY=4
TARGET=unix:///run/forgejo/forgejo.sock
SLOG_LEVEL=DEBUG
BIND=/run/forgejo/anubis/anubis.sock
BIND_NETWORK=unix
METRICS_BIND=/run/forgejo/anubis/metrics.sock
METRICS_BIND_NETWORK=unix
SOCKET_MODE=666
ED25519_PRIVATE_KEY_HEX_FILE=%d/anubis_key_ed25519

I do not yet have a bot policy file.

[drewcassidy]

Well thats odd, it works fine in Firefox but not Safari, even in private mode and with all cookies and cache cleared.

[Xe]

iOS Safari or macOS Safari?

[drewcassidy]

Tried both, neither worked (but did before with the same configuration).

[drewcassidy]

Nevermind, tried clearing cookies in Firefox and now it also 404s

[drewcassidy]

Updating to Anubis 1.22 downloaded from the GitHub release fixed it.

Looks like it was a problem with the Fedora package thats since been fixed https://src.fedoraproject.org/rpms/anubis/c/67cc196890e77d7b308234dca7c070349a02d219?branch=rawhide