[BUG] Video playback fails in apps (android and IOS) when adding custom proxy with self-signed SSL

[w00tlarr]

The bug

Initial Login to Immich app is OK where I'm able to set the https url and enabled the Allow self-signed SSL certificates

Initial building of timeline and images are OK too and able to scroll all the way down the timeline with all thumbnails loaded properly.

Am able to view any static Images fine but I unable to playback any videos in the app itself when self-signed SSL.
Tho I am able to download the original video file.

Using external nginx as reverse proxy with this nginx.conf:

server {
listen 2000 ssl default_server;
listen [::]:2000 ssl default_server;
server_name _;

ssl_certificate /etc/certs/server.pem;
ssl_certificate_key /etc/certs/server-key.pem;

root /var/www/html;

client_max_body_size 50000M;

#"Immich"
location / {
proxy_pass_request_headers on;
    proxy_pass http://192.168.1.XX:2283;
    proxy_set_header Host              $http_host;
    proxy_set_header X-Real-IP         $remote_addr;
    proxy_set_header X-Forwarded-For   $proxy_add_x_forwarded_for;
    proxy_set_header X-Forwarded-Proto $scheme;
    proxy_http_version 1.1;
    proxy_set_header   Upgrade    $http_upgrade;
    proxy_set_header   Connection "upgrade";
    proxy_redirect off;    
}

}

Log attached from app when playing videos:
Immich_log_2023-10-26T15_10_30.207502.csv

The OS that Immich Server is running on

Docker, managed with Portainer on Debian Bookworm. Using external nginx as reverse proxy.

Version of Immich Server

1.82.1

Version of Immich Mobile App

1.82.0

Platform with the issue

• Server
• Web
• Mobile

Your docker-compose.yml content

Same as default in Github

Your .env content

Same as default in Github

Reproduction steps

1. Import self-signed SSL (CA) into mobile device
2. Install Immich mobile app in Android/iOS
3. Set the Allow self-signed SSL certificates at the Login sceen with "gears" icon when setting up https url to nginx reverse proxy to Immich
4. Login to Immich
5. Allow initial timeline to be built
6. Noticed all static images are able to viewed normally
7. Start playing any video. Video is open and able to see the video thumbnail but is not able to play it. Loading indicator just spins and spins. Doesn't timeout or show any additional errors.

Additional information

No response

[w00tlarr]

nginx reverse proxy logs:

[w00tlarr]

Discord: https://discord.com/channels/979116623879368755/1159225824935940167

[w00tlarr]

Forgot to mention - updated my nginx reverse proxy without SSL, setup Immich app with normal http url, and the video playback works OK

[t3dium]

I'm also encountering this issue, setup immich behind nginx-proxy-manager with a self signed cert and videos don't play on mobile. They only work on the web version of immich

[lwalegba]

I also had this issue. But changed to a certificate from Let's Encrypt (i.e. not self signed) and then it works. So it seems to be connected to just self signed certs.

[blacksong]

You are right

[w00tlarr]

I'm also encountering this issue, setup immich behind nginx-proxy-manager with a self signed cert and videos don't play on mobile. They only work on the web version of immich

Yes. Issue only occurs at the mobile app

[blacksong]

I had the same issue using nginx and self-signed SSL.

[auzbaig94]

Same issue still with server version of 1.106.4 and app version on android (pixel 6a) 1.106.3.

Using self signed cert and nginx. Can stream in browser but not the app. Same with another iphone I have.

[jhagas]

I also encounter this issue, any update on this?

[w00tlarr]

refer to #5553