podrae 3 Posted October 4, 2023 Posted October 4, 2023 Hi All Ive been reading threads for a number of hours about this issue and believe I know why its not working for me but unable to fix. Any suggestions would be appreciated. I have Emby running on a Windows server behind an Nginx proxy which itself is behind a Sophos firewall. As you have probably guessed Chromecasting only works locally and not externally. I believe this is due to Emby logins showing connection from the Proxy IP and not their external one so therefore treated as local users (they can control local lan chromecasts) I have the X forward sections in config, SSL is handled by Nginx Ill past my Nginx and Emby config below. ##EMBY Server## server { listen [::]:80; listen 80; listen [::]:443 ssl; listen 443 ssl; server_name movies.#######.com; ssl_session_timeout 30m; ssl_protocols TLSv1.2 TLSv1.1 TLSv1; ssl_certificate SSL/#######Wild.crt; ssl_certificate_key SSL/########.rsa; ssl_session_cache shared:SSL:10m; #add_header Public-Key-Pins ' #pin-sha256="8TzXdhbnv+l6EjDG2Vj9EmgGiSmZenrTZSNUFEwyUE="; #pin-sha256="YLh1dUR9y6Kja30RrAn7JKnbQG/utLMkBgFF2Fuihg="; #pin-sha256="Vjs8r4z+80wjNcr1KepWQboSIRi63WsWXhIMN+eWys="; #max-age=86400; includeSubDomains'; add_header X-Xss-Protection "1; mode=block" always; add_header X-Content-Type-Options "nosniff" always; add_header Strict-Transport-Security "max-age=2592000; includeSubdomains" always; add_header X-Frame-Options "SAMEORIGIN" always; proxy_hide_header X-Powered-By; add_header 'Referrer-Policy' 'no-referrer'; add_header Content-Security-Policy "frame-ancestors #######.com movies.#######.com;"; location / { proxy_pass http://192.168.1.191:8096; proxy_set_header X-Real-IP $remote_addr; proxy_set_header Host $host; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; #Next three lines allow websockets proxy_http_version 1.1; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection "upgrade"; } }
podrae 3 Posted October 4, 2023 Author Posted October 4, 2023 Guys I have resolved the IP issue. Not sure if Chromecasting is fixed yet or not but it was my firewall at fault rather than Nginx in the end. I had a loopback NAT rule above the normal Nginx rule so that my domain names worked internally. This has source address set to masq. If i dropped this below the main rule then IP addresses are being correctly logged by Emby. 1
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now