Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Sanctum issue ? #223

Open
zelionix opened this issue Dec 22, 2024 · 3 comments
Open

Sanctum issue ? #223

zelionix opened this issue Dec 22, 2024 · 3 comments
Labels
question Something is unclear

Comments

@zelionix
Copy link

zelionix commented Dec 22, 2024

I succeed install on my debian 12 virtual machine.

pterodactyl_panel_domain: "pterodactyl.local"

I get the login page... Nice !
However when trying to login :

10.0.2.2 - - [22/Dec/2024:01:53:57 +0100] "GET /sanctum/csrf-cookie HTTP/1.1" 404 187 "http://pterodactyl.local:8001/auth/login" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"

NB : I have a port forward local port 8001 --> VM port 80

@zelionix
Copy link
Author

zelionix commented Dec 22, 2024

OK found the issue ! The stack is not working using http only protocol.
The application configuration in /var/www/pterodactyl/.env is set with
APP_URL={{ pterodactyl_panel_url | quote }}
but the ansible role defaults set :
pterodactyl_panel_url: "https://{{ ansible_fqdn }}"
see the hard coded protocole above ? ^_^

@maxhoesel
Copy link
Collaborator

Hi! This is intentional - the panel role is designed to only support access via HTTPS, not plain HTTP. See also the apache template: https://github.com/maxhoesel-ansible/ansible-collection-pterodactyl/blob/main/roles/pterodactyl_panel/templates/pterodactyl.conf.j2

This information should probably be added to the README. I'm open to reworking the webserver integration in the future to be more generic and to support HTTP (also related to #220), but I don't actively use this collection myself anymore, so this is low-priority for me.

@maxhoesel maxhoesel added the question Something is unclear label Dec 24, 2024
@zelionix
Copy link
Author

Agreed this should be added in the Readme as this is "security by design".
Not sure a good idea to introduce the http support, as this not designed for... ^_ ^
Will add it in Readme in the PR concerning nginx.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
question Something is unclear
Projects
None yet
Development

No branches or pull requests

2 participants