Latest update of Weblate version 5 (5.12.x -> 5.13) causes redirect loop.

[GamePlayer-8]

Hello,

I have an issue with the latest weblate release (5.13.0), where whenever I go to any webpage it redirects me infinitely to the same URI with 301 response code (except for the healthcheck at /healthz/). How can I resolve this?

Weblate configuration:

# See Weblate documentation for detailed description:
# https://docs.weblate.org/en/latest/admin/install/docker.html#generic-settings

# Weblate setup
WEBLATE_SITE_DOMAIN=weblate.xvm
WEBLATE_DEBUG=0
WEBLATE_LOGLEVEL=INFO
WEBLATE_SITE_TITLE=Weblate
WEBLATE_ADMIN_NAME=Weblate Admin
WEBLATE_ADMIN_EMAIL=<REDACTED>
WEBLATE_ADMIN_PASSWORD=<REDACTED>
WEBLATE_SERVER_EMAIL=<REDACTED>
WEBLATE_DEFAULT_FROM_EMAIL=<REDACTED>
WEBLATE_ALLOWED_HOSTS=*
WEBLATE_REGISTRATION_OPEN=0
WEBLATE_REGISTRATION_ALLOW_BACKENDS=gitea
WEBLATE_NO_EMAIL_AUTH=1

WEBLATE_ALLOWED_HOSTS=weblate.xvm,weblate.mrrp.es
WEBLATE_ENABLE_HTTPS=1
WEBLATE_IP_PROXY_HEADER=HTTP_X_FORWARDED_FOR

# Mail server, the server has to listen on port 587 and understand TLS
WEBLATE_EMAIL_HOST=<REDACTED>
WEBLATE_EMAIL_PORT=465
# Do NOT use quotes here
WEBLATE_EMAIL_HOST_USER=<REDACTED>
# Do NOT use quotes here
WEBLATE_EMAIL_HOST_PASSWORD=<REDACTED>

# Extra
#WEBLATE_TIME_ZONE=
#WEBLATE_MT_GOOGLE_KEY=
#WEBLATE_MT_GOOGLE_CREDENTIALS=
#WEBLATE_MT_GOOGLE_PROJECT=
#WEBLATE_MT_GOOGLE_LOCATION=
#WEBLATE_SOCIAL_AUTH_GITHUB_KEY=
#WEBLATE_SOCIAL_AUTH_GITHUB_SECRET=
#WEBLATE_SOCIAL_AUTH_BITBUCKET_KEY=
#WEBLATE_SOCIAL_AUTH_BITBUCKET_SECRET=
#WEBLATE_SOCIAL_AUTH_FACEBOOK_KEY=
#WEBLATE_SOCIAL_AUTH_FACEBOOK_SECRET=
#WEBLATE_SOCIAL_AUTH_GOOGLE_OAUTH2_KEY=
#WEBLATE_SOCIAL_AUTH_GOOGLE_OAUTH2_SECRET=

#WEBLATE_OFFLOAD_INDEXING=1
#WEBLATE_GOOGLE_ANALYTICS_ID=
#WEBLATE_ENABLE_HTTPS=1
#WEBLATE_IP_PROXY_HEADER=HTTP_X_FORWARDED_FOR
#WEBLATE_REQUIRE_LOGIN=1

# LDAP Auth
#WEBLATE_AUTH_LDAP_SERVER_URI=ldap://ldap.example.org
#WEBLATE_AUTH_LDAP_USER_DN_TEMPLATE=uid=%(user)s,ou=People,dc=example,dc=net
#WEBLATE_AUTH_LDAP_USER_ATTR_MAP=first_name:name,email:mail

# PostgreSQL setup
POSTGRES_PASSWORD=<REDACTED>
POSTGRES_USER=<REDACTED>
POSTGRES_DATABASE=<REDACTED>
POSTGRES_HOST=db
POSTGRES_PORT=5432

# db settings
POSTGRES_DB=$POSTGRES_DATABASE
DATABASE_URL="postgres://${POSTGRES_USER}:${POSTGRES_PASSWORD}@db:5432/${POSTGRES_DB}"

# Cache setup
# https://docs.weblate.org/en/latest/admin/install.html#production-cache
REDIS_HOST=redis
REDIS_PORT=6379

# GitLab lab setup
# WEBLATE_GITLAB_USERNAME=
# WEBLATE_GITLAB_HOST=
# WEBLATE_GITLAB_TOKEN=

WEBLATE_GITEA_USERNAME=weblate
WEBLATE_GITEA_TOKEN=<REDACTED>
WEBLATE_GITEA_HOST=forgejo.xvm

WEBLATE_SOCIAL_AUTH_GITEA_KEY=<REDACTED>
WEBLATE_SOCIAL_AUTH_GITEA_SECRET=<REDACTED>
WEBLATE_SOCIAL_AUTH_GITEA_API_URL=https://forgejo.xvm
WEBLATE_AUTHENTICATION_BACKENDS=gitea

CLIENT_MAX_BODY_SIZE=800M
PYTHON_IGNORE_SSL_CERTIFICATE=1
REQUESTS_CA_BUNDLE=/etc/ssl/certs/ca-certificates.crt

docker-compose.yml:

services:
  weblate:
    image: weblate/weblate:5
    extra_hosts:
      - "forgejo.xvm:172.16.239.1"
      - "ci.xvm:172.16.239.1"
      - "weblate.xvm:172.16.239.1"
    dns:
      - "172.16.239.1"
    ports:
      - 18050:8080
      - 18051:4443
    networks:
      weblate:
        ipv4_address: 172.16.239.80
    tmpfs:
      - /run
      - /tmp
    volumes:
      - weblate-data:/app/data
      - weblate-cache:/app/cache
      - /etc/ssl/certs/ca-certificates.crt:/etc/ssl/certs/ca-certificates.crt:ro
      - /etc/ssl/cert.pem:/etc/ssl/cert.pem:ro
    env_file:
      - ./environment
    restart: unless-stopped
    read_only: true
    depends_on:
      db:
        condition: service_healthy
      redis:
        condition: service_healthy

  redis:
    restart: unless-stopped
    image: redis:7-alpine
    networks:
      - weblate
    volumes:
      - weblate-redis:/data
    healthcheck:
      test: "redis-cli ping"
      interval: 5s
      retries: 20

  db:
    restart: unless-stopped
    image: postgres:17-alpine
    networks:
      - weblate
    env_file:
      - ./environment
    volumes:
      - weblate-db:/var/lib/postgresql/data
    healthcheck:
      test: "pg_isready -U $$POSTGRES_USER -d $$POSTGRES_DB"
      interval: 5s
      retries: 20

volumes:
  weblate-cache:
    name: weblate-cache
  weblate-data:
    name: weblate-data
  weblate-db:
    name: weblate-db
  weblate-redis:
    name: weblate-redis

networks:
  weblate:
     name: weblate
     driver: bridge
     enable_ipv6: true
     ipam:
        driver: default
        config:
           - subnet: 172.16.239.0/24
           - subnet: fd4d:6169:6c63:6f74::/64

[nijel]

Please see upgrading instructions at https://docs.weblate.org/en/latest/changes.html#weblate-5-13

[GamePlayer-8]

adding WEBLATE_SECURE_PROXY_SSL_HEADER=HTTP_X_FORWARDED_PROTO,https to the environment fixed the issue, thank you!

[nijel]

#15879 further clarifies upgrading instructions.