nginx proxy_pass only works with complete filenames

Question

I have an nginx which should proxy the path domain.de/pihole/* to a docker container running pihole. If I use the IP of the docker dontainer (172.20.0.2) the index.php is loaded, 172.20.0.2/admin and 172.20.0.2/admin/index.php work as well. If I use domain.de/pihole or domain.de/pihole/admin, I get a 404. If I use domain.de/pihole/admin/index.php, all is working. This is my /etc/nginx/sites-available/default:

server {
        listen 80 default_server;
        listen [::]:80 default_server;
 root /var/www/html;

        # Add index.php to the list if you are using PHP
        index index.html index.htm index.nginx-debian.html;

        server_name _;

        location / {
                # First attempt to serve request as file, then
                # as directory, then fall back to displaying a 404.
                try_files $uri $uri/ =404;
                #proxy_pass http://172.20.0.2:25565;
        }
        location /pihole/ {
                proxy_pass http://172.20.0.2:80/;
                proxy_http_version 1.1;
                proxy_set_header Host $host:$server_port;
                proxy_set_header Referer $http_referer;
                proxy_set_header X-Real-IP $remote_addr;
                proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
                proxy_set_header X-Forwarded-Proto https;
                proxy_set_header X-Forwarded-Ssl on;
                proxy_set_header X-Nginx-Proxy true;
                proxy_set_header X-Client-Verify $ssl_client_verify;
                proxy_set_header X-Client-DN $ssl_client_s_dn;
                proxy_set_header X-SSL-Issuer $ssl_client_i_dn;
                proxy_set_header Upgrade $http_upgrade;
                proxy_set_header Connection "upgrade";
                proxy_redirect off;

        }
}

Any ideas what I have to change (I copied most of the "proxy_set_header" stuff from serverfault)?

score 0 · Answer 1 · answered Jul 22 '19 at 13:26

0

Please remove the trailing / in the proxy_pass line. The reason why is described in the doc for proxy_pass

Quote:

If proxy_pass is specified without a URI, the request URI is passed to the server in the same form as sent by a client when the original request is processed, or the full normalized request URI is passed when processing the changed URI:
location /some/path/ {
    proxy_pass http://127.0.0.1;
}

answered Jul 22 '19 at 13:26

Aleksandar

281
1
5

tried `location /pihole`, `location /pihole/` both in combination with `proxy_pass http://127.20.0.2/`and `proxy_pass http://127.20.0.2`, always the same error: `[ERROR]: Unable to parse results from queryads.php: Unhandled error message (Invalid domain!)` – TNT2k Jul 22 '19 at 18:44
Okay. the queryads.php send some invalid answer. Please can you run nginx in debug mode and see what's the answer from the php is. [A debugging log](https://nginx.org/en/docs/debugging_log.html) – Aleksandar Jul 23 '19 at 07:29
I already solved the issue, pihole needs a specific url, see my answer above (now it is below). Thank you for your help. – TNT2k Jul 23 '19 at 14:30

score 0 · Accepted Answer · answered Jul 22 '19 at 19:48

solved with this location block

location /pihole/ {
    proxy_http_version 1.1;
    proxy_set_header Referer $http_referer;
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header X-Forwarded-Proto https;
    proxy_set_header X-Forwarded-Ssl on;
    proxy_set_header X-Nginx-Proxy true;
    proxy_set_header X-Client-Verify $ssl_client_verify;
    proxy_set_header X-Client-DN $ssl_client_s_dn;
    proxy_set_header X-SSL-Issuer $ssl_client_i_dn;
    proxy_set_header Upgrade $http_upgrade;
    proxy_set_header Connection "upgrade";
    proxy_pass http://172.20.0.2/admin/;
}

I used a bit of try and error with slashes and the fact that pihole needs /admin in the url (what I did not know before)

nginx proxy_pass only works with complete filenames

2 Answers2