pir8radio 1292 Posted September 20, 2021 Share Posted September 20, 2021 27 minutes ago, judgey said: Hey mate, i Posted on your thread with your nginx config thx uhm this thread? I dont see it... Link to comment Share on other sites More sharing options...
judgey 13 Posted September 20, 2021 Author Share Posted September 20, 2021 (edited) This one mate last posts Edited September 20, 2021 by judgey Link to comment Share on other sites More sharing options...
judgey 13 Posted September 20, 2021 Author Share Posted September 20, 2021 Ill post here just in case something wrong mate Hey mate, im trying your config out but i get the following error Sep 20 17:45:30 Emby nginx[3410328]: nginx: [emerg] "worker_processes" directive is not allowed here in /etc/nginx/sites-enabled/emby:1 Sep 20 17:45:30 Emby nginx[3410328]: nginx: configuration file /etc/nginx/nginx.conf test failed I believe because I use a script to install apps this has the default config, but i don't have a clue how to make this config work with your config. Link to comment Share on other sites More sharing options...
Luke 37099 Posted September 21, 2021 Share Posted September 21, 2021 We are looking into the original issue here. Thanks for reporting. 1 Link to comment Share on other sites More sharing options...
judgey 13 Posted October 6, 2021 Author Share Posted October 6, 2021 Any update on this please Link to comment Share on other sites More sharing options...
ebr 14925 Posted October 6, 2021 Share Posted October 6, 2021 1 hour ago, judgey said: Any update on this please Hi. You tracked this down to your proxy, correct? Link to comment Share on other sites More sharing options...
judgey 13 Posted October 6, 2021 Author Share Posted October 6, 2021 Nope luke said he was aware was wondering on an update Link to comment Share on other sites More sharing options...
ebr 14925 Posted October 6, 2021 Share Posted October 6, 2021 Are you able to test without the proxy involved? Link to comment Share on other sites More sharing options...
judgey 13 Posted October 6, 2021 Author Share Posted October 6, 2021 I'm a bit of a newbie mate, do you mean without nginx ? I posted my config in the nginx post dont know if that will help. If you know of an easy way to turn of nginx and test what you suggested I'm open to any ideas Link to comment Share on other sites More sharing options...
judgey 13 Posted October 6, 2021 Author Share Posted October 6, 2021 (edited) Just to make you aware I'm using CL but if i turn it off it makes no difference Update If i exit the emby app on my shield 3 times everything works dont know why, i tested this 3 times and each time on the 3rd exit it works Edited October 6, 2021 by judgey Link to comment Share on other sites More sharing options...
ebr 14925 Posted October 6, 2021 Share Posted October 6, 2021 1 hour ago, judgey said: I'm a bit of a newbie mate, do you mean without nginx ? Yes. Just connect manually to the internal IP address of your server. Link to comment Share on other sites More sharing options...
judgey 13 Posted October 6, 2021 Author Share Posted October 6, 2021 Just now, ebr said: Yes. Just connect manually to the internal IP address of your server. Hey yes sorry everything works ok with IP only Link to comment Share on other sites More sharing options...
ebr 14925 Posted October 6, 2021 Share Posted October 6, 2021 1 minute ago, judgey said: Hey yes sorry everything works ok with IP only Okay, then the issue is somehow related to the proxy. Either it is blocking or removing something or, perhaps, it is just slowing things down so much that things time out. Perhaps @pir8radio can lend some insight... Link to comment Share on other sites More sharing options...
judgey 13 Posted October 6, 2021 Author Share Posted October 6, 2021 (edited) 8 minutes ago, ebr said: Okay, then the issue is somehow related to the proxy. Either it is blocking or removing something or, perhaps, it is just slowing things down so much that things time out. Perhaps @pir8radio can lend some insight... I can get it to work if i exit the app 3 times, would a video help ? my config server { if ($host = emby.xxx.stream) { return 301 https://$host$request_uri; } # managed by Certbot listen 80; server_name emby.xxx.stream; return 301 https://$server_name$request_uri; } server { listen 443 ssl http2; ## Listens on port 443 IPv4 with http2 and ssl enabled server_name emby.xxx.stream; ## enter your service name and domain name here example emby.domainname.com add_header Strict-Transport-Security "max-age=31536000"; ssl_session_timeout 30m; ssl_protocols TLSv1 TLSv1.1 TLSv1.2; ssl_certificate /etc/nginx/ssl/emby.xxx.stream/emby.xxx.stream.cert.pem; # managed by Certbot ssl_certificate_key /etc/nginx/ssl/emby.xxx.stream/emby.xxx.stream.key.pem; # managed by Certbot ssl_ciphers 'ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-DSS-AES128-GCM-SHA256:kEDH+AESGCM:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA256:DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA:DHE-RSA-AES256-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:AES:CAMELLIA:DES-CBC3-SHA:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!MD5:!PSK:!aECDH:!EDH-DSS-DES-CBC3-SHA:!EDH-RSA-DES-CBC3-SHA:!KRB5-DES-CBC3-SHA'; ssl_prefer_server_ciphers on; ssl_session_cache shared:SSL:10m; client_max_body_size 0; location / { proxy_pass http://127.0.0.1:8096; proxy_hide_header X-Powered-By; ## Hides nginx server version from bad guys. proxy_set_header Range $http_range; ## Allows specific chunks of a file to be requested. proxy_set_header If-Range $http_if_range; ## Allows specific chunks of a file to be requested. proxy_set_header X-Real-IP $remote_addr; ## Passes the real client IP to the backend server. proxy_set_header Host $host; ## Passes the requested domain name to the backend server. proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; ## Adds forwarded IP to the list of IPs that were forwarded to the backend server. ## ADDITIONAL SECURITY SETTINGS ## ## Optional settings to improve security ## ## add these after you have completed your testing and ssl setup ## add_header 'Referrer-Policy' 'origin-when-cross-origin'; add_header Strict-Transport-Security "max-age=15552000; preload" always; add_header X-Frame-Options "SAMEORIGIN" always; add_header X-Content-Type-Options "nosniff" always; add_header X-XSS-Protection "1; mode=block" always; ## WEBSOCKET SETTINGS ## Used to pass two way real time info to and from emby and the client. proxy_http_version 1.1; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection $http_connection; } } Edited October 6, 2021 by judgey Link to comment Share on other sites More sharing options...
judgey 13 Posted October 6, 2021 Author Share Posted October 6, 2021 (edited) So i just tested this on an android phone that was ok then a Samsung tv and again that was ok, but on the shield or google stick the error occurs so not sure what is going on, but if u exit it 3 times on shield it fixes it Edited October 6, 2021 by judgey Link to comment Share on other sites More sharing options...
Luke 37099 Posted October 7, 2021 Share Posted October 7, 2021 Did you update your nginx config to match that of @pir8radio ? Link to comment Share on other sites More sharing options...
judgey 13 Posted October 7, 2021 Author Share Posted October 7, 2021 13 hours ago, Luke said: Did you update your nginx config to match that of @pir8radio ? I can not use his config because i use a default config, i don't know how to or what to edit in the default config I'm willing to post it if it helps. Link to comment Share on other sites More sharing options...
pir8radio 1292 Posted October 8, 2021 Share Posted October 8, 2021 On 10/7/2021 at 12:01 PM, judgey said: I can not use his config because i use a default config, i don't know how to or what to edit in the default config I'm willing to post it if it helps. sorry guys, been busy with projects. what did i miss? whats going on lol i went back a few messages but didnt piece together the issue. Link to comment Share on other sites More sharing options...
ebr 14925 Posted October 9, 2021 Share Posted October 9, 2021 12 hours ago, pir8radio said: sorry guys, been busy with projects. what did i miss? whats going on lol i went back a few messages but didnt piece together the issue. I think something in his proxy is either slowing things way down or stripping some information causing his images to not load in some cases. We've asked him to align his nginx config with your sample. Thanks for any assistance you can provide. Link to comment Share on other sites More sharing options...
judgey 13 Posted October 9, 2021 Author Share Posted October 9, 2021 This is the default config that i have to use server { listen 80 default_server; listen [::]:80 default_server; server_name qb.xxx.stream; location /.well-known { alias /srv/.well-known; allow all; default_type "text/plain"; autoindex on; } #location / { # return 301 https://$host$request_uri; #} } # SSL configuration server { listen 443 ssl http2 default_server; listen [::]:443 ssl http2 default_server; server_name qb.xxx.stream; ssl_certificate /etc/nginx/ssl/xxx.stream/xxx.stream.cert.pem; ssl_certificate_key /etc/nginx/ssl/xxx.stream/xxx.stream.key.pem; include snippets/ssl-params.conf; include snippets/cloudflare.conf; include snippets/common-exploit-prevention.conf; include snippets/mime-type-security.conf; include snippets/reflected-xss-prevention.conf; include snippets/sec-bad-bots.conf; include snippets/sec-file-injection.conf; include snippets/sec-php-easter-eggs.conf; include snippets/server-security-options.conf; include snippets/socket-settings.conf; client_max_body_size 40M; server_tokens off; root /srv/; index index.html index.php index.htm; location ~ \.php$ { include snippets/fastcgi-php.conf; fastcgi_pass unix:/run/php/php7.4-fpm.sock; fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name; } include /etc/nginx/apps/*; location ~ /\.ht { deny all; } location /fancyindex { } } And this in my emby config server { if ($host = emby.xxx.stream) { return 301 https://$host$request_uri; } # managed by Certbot listen 80; server_name emby.xxx.stream; return 301 https://$server_name$request_uri; } server { listen 443 ssl http2; ## Listens on port 443 IPv4 with http2 and ssl enabled server_name emby.xxx.stream; ## enter your service name and domain name here example emby.domainname.com add_header Strict-Transport-Security "max-age=31536000"; ssl_session_timeout 30m; ssl_protocols TLSv1 TLSv1.1 TLSv1.2; ssl_certificate /etc/nginx/ssl/emby.xxx.stream/emby.xxx.stream.cert.pem; # managed by Certbot ssl_certificate_key /etc/nginx/ssl/emby.xxx.stream/emby.xxx.stream.key.pem; # managed by Certbot ssl_ciphers 'ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-DSS-AES128-GCM-SHA256:kEDH+AESGCM:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA256:DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA:DHE-RSA-AES256-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:AES:CAMELLIA:DES-CBC3-SHA:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!MD5:!PSK:!aECDH:!EDH-DSS-DES-CBC3-SHA:!EDH-RSA-DES-CBC3-SHA:!KRB5-DES-CBC3-SHA'; ssl_prefer_server_ciphers on; ssl_session_cache shared:SSL:10m; client_max_body_size 0; location / { proxy_pass http://127.0.0.1:8096; proxy_hide_header X-Powered-By; ## Hides nginx server version from bad guys. proxy_set_header Range $http_range; ## Allows specific chunks of a file to be requested. proxy_set_header If-Range $http_if_range; ## Allows specific chunks of a file to be requested. proxy_set_header X-Real-IP $remote_addr; ## Passes the real client IP to the backend server. proxy_set_header Host $host; ## Passes the requested domain name to the backend server. proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; ## Adds forwarded IP to the list of IPs that were forwarded to the backend server. ## ADDITIONAL SECURITY SETTINGS ## ## Optional settings to improve security ## ## add these after you have completed your testing and ssl setup ## add_header 'Referrer-Policy' 'origin-when-cross-origin'; add_header Strict-Transport-Security "max-age=15552000; preload" always; add_header X-Frame-Options "SAMEORIGIN" always; add_header X-Content-Type-Options "nosniff" always; add_header X-XSS-Protection "1; mode=block" always; ## WEBSOCKET SETTINGS ## Used to pass two way real time info to and from emby and the client. proxy_http_version 1.1; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection $http_connection; } } Thank u Link to comment Share on other sites More sharing options...
pir8radio 1292 Posted October 10, 2021 Share Posted October 10, 2021 10 hours ago, judgey said: This is the default config that i have to use And this in my emby config Thank u so its just images you have issues with? not videos? You cool with creating a guest account and pm me the info.. I can usually spot what's going on when accessing as a client. I take it web browser looks good? Just android issues? 1 Link to comment Share on other sites More sharing options...
judgey 13 Posted October 10, 2021 Author Share Posted October 10, 2021 Hey mate sure you can, just to note its only on the NVidia shield and googles new stick. The mad thing is after 3 exits of the app it works ok i dont understand that myself. works fine on windows/android phone/samsungtv its just the two devices i said. Link to comment Share on other sites More sharing options...
Luke 37099 Posted October 12, 2021 Share Posted October 12, 2021 Can you try sideloading our standard android app on the same device and see how that compares? https://emby.media/emby-for-android.html Thanks. Link to comment Share on other sites More sharing options...
ebr 14925 Posted October 12, 2021 Share Posted October 12, 2021 14 hours ago, Luke said: Can you try sideloading our standard android app on the same device and see how that compares? https://emby.media/emby-for-android.html Thanks. I think we've already confirmed that is fine and that the issue is related to the native Android image library (which that app doesn't use) in combination with the proxy. Link to comment Share on other sites More sharing options...
judgey 13 Posted October 12, 2021 Author Share Posted October 12, 2021 39 minutes ago, ebr said: I think we've already confirmed that is fine and that the issue is related to the native Android image library (which that app doesn't use) in combination with the proxy. Is there anything i can do my end at all or is this something your have to deal with mate? Would you like a video of all this at all? Link to comment Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now