Problem with App accessing server URL over SSL with Reverse Proxy, could this be my proxy and SSL config?

[steve-builds]

Not sure if this is a "bug" with immich so posting as a discuession here first.

I have immich running in proxmox in a Ubuntu VM with a local LAN ip on the 10. network. I set up DynDNS and port forwarded 80 and 443 from my router to the ip of the machine. I realize this is not very secure but I'm testing and playing with proxies. In the past, I would just access everything on my home LAN via my own VPN on my phone even if outside the network, and that worked fine.

Everything was working fine when my app is connected to the local ip or DynDNS from INSIDE my network using: http://publicdomain.ddns.net:2283 as the Server URL in the iphone app. I set up the public domain and SSL and THAT worked great on the WEB APP. However, once I logged into the Mobile app (ios) ver 1.90.0 built 130, the uploading seems to work, I think, but then just stopped uploading, it seems to load the images but uploading or backing up would fail. (From inside my network, but accessing the public domain over SSL.)

Once I logged in using the non-secure URL and port, the uploading worked again.

http://publicdomain.ddns.net:2283 = works fine
https://publicdomain.ddns.net = works fine in web BUT NOT in mobile app.

I used this guide from Chat GPT to set up the reverse proxy (Which seems to work on web)

Install Nginx on your server.  Create a configuration file for your reverse proxy. 
You can create a new configuration file in the /etc/nginx/sites-available/ directory (on Ubuntu, for example).

In the configuration file, define the server block to listen on the public domain and proxy requests to your Docker container's internal IP and port. 

After creating the configuration file, create a symbolic link to it in the /etc/nginx/sites-enabled/ directory (on Ubuntu).
Test the Nginx configuration: sudo nginx -t.

If the test is successful, reload Nginx to apply the changes: sudo systemctl reload nginx (on systemd-based systems).

On my firewall Sophos URM, I have port 80 and 443 forwarded to the VM's inside IP address.

my proxy config on the server is: /etc/nginx/sites-available/immich.conf:

server {
        server_name publicdomain.ddns.net;

        location / {
                proxy_pass http://localhost:2283;
                proxy_set_header Host $host;
                proxy_set_header X-Real-IP $remote_addr;
        }

    listen 443 ssl; # managed by Certbot
    ssl_certificate /etc/letsencrypt/live/publicdomain.ddns.net/fullchain.pem; # mana>    ssl_certificate_key /etc/letsencrypt/live/publicdomain.ddns.net/privkey.pem; # ma>    include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
    ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot

}

server {
    if ($host = publicdomain.ddns.net) {
        return 301 https://$host$request_uri;
    } # managed by Certbot

        listen 80;
        server_name publicdomain.ddns.net;
    return 404; # managed by Certbot

}

I'm running Immich 1.90.2 server, 1.90.0 ios app.

I'm not seeing anything that would be related to this on the console while the docker is running in "up" mode. The iphone app just shows the images to be backed up and tries to back them up, shows the progress bar go to 100% but then just sits there and there is nothing new on the server.

[alextran1502]

You will need to add max_body_client_size setting to your proxy so that it can upload large file over the proxy

[steve-builds]

thank you for the quick reply, i will give this a try now.

[steve-builds]

I believe that fixed it! thank you.