Set custom url path with nginx reverse proxy

[cvc90]

Could you tell me how to get UpSnap to work correctly with an nginx reverse proxy? Do I have to add some special parameter to make it work?

location ^~ /UpSnap {
proxy_pass http://localhost:8090/;
}

As you can see in the images, it does not do the redirections correctly

[seriousm4x]

I think you are trying to use a sub route. Thats not supported at the moment. Please use a subdomain instead

[cvc90]

For security/organizational reasons I can't use a subdomain, I need to use a secondary path.

Would it be possible to include this option for future versions?

[seriousm4x]

Currently not. It requires the frontend to adjust for the custom path (not that much of a deal), but also the backend, which is not really supported yet pocketbase/pocketbase#1802 (reply in thread)

[cvc90]

Ok, well, we hope that one day that function will arrive.

Currently not. It requires the frontend to adjust for the custom path (not that much of a deal), but also the backend, which is not really supported yet pocketbase/pocketbase#1802 (reply in thread)

Another alternative that could be valid for me would be to configure UpSnap to load https natively, would it be possible to configure UpSnap to load https natively?

[seriousm4x]

You can already use https with automatic Lets Encrypt certs:

> upsnap.exe serve --help
Starts the web server (default to 127.0.0.1:8090)

Usage:
  upsnap.exe serve [flags]

Flags:
  -h, --help              help for serve
      --http string       api HTTP server address (default "127.0.0.1:8090")
      --https string      api HTTPS server address (auto TLS via Let's Encrypt)
                          the incoming --http address traffic also will be redirected to this address
      --origins strings   CORS allowed domain origins list (default [*])

Global Flags:
      --debug                  enable debug mode, aka. showing more detailed logs
      --dir string             the PocketBase data directory (default "C:\\Users\\max\\Downloads\\UpSnap_3.0.3_windows_amd64\\pb_data")
      --encryptionEnv string   the env variable whose value of 32 characters will be used
                               as encryption key for the app settings (default none)

https://pocketbase.io/docs/going-to-production/#deployment-strategies

[cvc90]

Can I use my own certificates? Since the Lets Encrypt certificates would not work for me from within the VPN / LAN

[seriousm4x]

Does not look like it
pocketbase/pocketbase#957
pocketbase/pocketbase#930 (comment)

[cvc90]

You don't seem to see a feasible solution to the problem of using certificates are redirected to using a reverse proxy which for security/organizational reasons, I can't use a subdomain and need to use a secondary path.

[daenney]

I think it should work if you have a trailing slash on both the location and the proxy_pass directives if I'm not mistaken? The trailing slash in nginx does a lot of magic.

You may need a rewrite in the location / to top it off:

if ($http_referer ~ "^https?://[^/]+/subdir/") {
    rewrite ^/(.*) https://$http_host/subdir/$1 redirect;
}

[cvc90]

What you are telling me would be something like this?

location ^~ /UpSnap/ {
    proxy_pass http://localhost:8090/;
	if ($http_referer ~ "^https?://[^/]+/subdir/") {
		rewrite ^/(.*) https://$http_host/subdir/$1 redirect;
		}		
}

[daenney]

Almost. The referrer check needs to go into location / to rewrite those requests properly since UpSnap itself won't generate URLs with /UpSnap as a prefix. Also you need to repleace the subdir in the if and rewrite like to UpSnap

[cvc90]

Ok!, What you are telling me would be something like this?

location / {		
	root  /volumeX/WWW;
	index index.php index.html index.htm;			
	if ($http_referer ~ "^https?://[^/]+/UpSnap/") {
		rewrite ^/(.*) https://$http_host/UpSnap/$1 redirect;
	}					

location ^~ /UpSnap/ {
    proxy_pass http://localhost:8090/;	
}

[seriousm4x]

Ok!, What you are telling me would be something like this?

location / {		
	root  /volumeX/WWW;
	index index.php index.html index.htm;			
	if ($http_referer ~ "^https?://[^/]+/UpSnap/") {
		rewrite ^/(.*) https://$http_host/UpSnap/$1 redirect;
	}					

location ^~ /UpSnap/ {
    proxy_pass http://localhost:8090/;	
}

Is this a working solution for your issue?

[johndo100]

I did it on secondary path and caddy reserve proxy but It didnt work.
Only admin /_/ work.
The client home page didnt show any thing.

I used handle_path in Caddyfile anyway..