Emby via reverse proxy and internal network settings

[FunkadelicRelic 10]

@@FunkadelicRelic - That's why I have 3 Shield TV's

 

They are the best Android TV devices on the market.

 

The HDHomeRun devices work well with Emby.

Perfect, that's exactly the one I'm looking at. I will most certainly be buying another to replace my Roku.

 

Thanks again for all your help mate, I really do appreciate it.

[CBers 7450]

Thanks again for all your help mate, I really do appreciate it.

No worries, we're here to try and help

[vortexdk 1]

I'm sorry to resurrect such an old thread, but I can find any other posts concerning using HA proxy.

I believe I have a slightly different problem.

When if try to log in from outside my network, I am able to login and play any file from the browser, but from the android app I get an invalid username and password.

but it looks like you are able to log in from all platforms on WAN, so I was hoping maybe you could help me understand how you were able to make it work.

I'm am configuring HA proxy on my pfsense box via the GUI.

I hope someone can help me.

[Luke 42077]

On 7/11/2020 at 7:41 AM, vortexdk said:

I'm sorry to resurrect such an old thread, but I can find any other posts concerning using HA proxy.

I believe I have a slightly different problem.

When if try to log in from outside my network, I am able to login and play any file from the browser, but from the android app I get an invalid username and password.

but it looks like you are able to log in from all platforms on WAN, so I was hoping maybe you could help me understand how you were able to make it work.

I'm am configuring HA proxy on my pfsense box via the GUI.

I hope someone can help me.

Hi, have you compared to the configurations in this topic?

[pir8radio 1312]

On 10/1/2017 at 1:36 PM, FunkadelicRelic said:

Below is my HAProxy config. I have a bunch of other services running through this but I have deleted the relevant lines. Also replaced my current WAN address with [ExternalIP] - left the internal in there.

# Automaticaly generated, dont edit manually.
# Generated on: 2017-09-29 15:16
global
	maxconn			10000
	stats socket 	/tmp/haproxy.socket level admin
	uid				80
	gid				80
	nbproc			1
	chroot			/tmp/haproxy_chroot
	daemon
	tune.ssl.default-dh-param	2048
	server-state-file /tmp/haproxy_server_state

listen HAProxyLocalStats
	bind 127.0.0.1:2200 name localstats
	mode http
	stats enable
	stats admin if TRUE
	stats uri /haproxy/haproxy_stats.php?haproxystats=1
	timeout client 5000
	timeout connect 5000
	timeout server 5000

# Frontend on internal interface
frontend FE-MGMT-443
	bind			10.8.20.254:443 name 10.8.20.254:443 ssl  crt /var/etc/haproxy/FE-MGMT-443.pem crt /var/etc/haproxy/FE-MGMT-443  
	mode			http
	log				global
	option			http-keep-alive
	option			forwardfor
	acl https ssl_fc
	http-request set-header		X-Forwarded-Proto http if !https
	http-request set-header		X-Forwarded-Proto https if https
	timeout client		30000
	acl			Emby	hdr_beg(host) -i emby.domain.com
	use_backend Emby_http_ipvANY  if  Emby 

# Frontend on external WAN interface
frontend FE-WAN-443
	bind			[ExternalIP]:443 name [ExternalIP]:443 ssl  crt /var/etc/haproxy/FE-WAN-443.pem crt /var/etc/haproxy/FE-WAN-443  
	mode			http
	log				global
	option			http-keep-alive
	option			forwardfor
	acl https ssl_fc
	http-request set-header		X-Forwarded-Proto http if !https
	http-request set-header		X-Forwarded-Proto https if https
	timeout client		30000
	acl			Emby	hdr_beg(host) -i emby.domain.com
	use_backend Emby_http_ipvANY  if  Emby 

backend Emby_http_ipvANY
	mode				http
	log					global
	timeout connect		30000
	timeout server		30000
	retries				3
	server				Emby 10.8.50.224:8096 check inter 10000

looks like the only headers you are passing/setting are 

http-request set-header		X-Forwarded-Proto http if !https
http-request set-header		X-Forwarded-Proto https if https

Take a look at my nginx config and pass/set the same headers..  I dont know the syntax for HA proxy.   

https://emby.media/community/index.php?/profile/1037-pir8radio/&tab=field_core_pfield_11

[vortexdk 1]

thank you very much I was able to pass these two headers:

Quote

http-request set-header		X-Forwarded-Proto http if !https
http-request set-header		X-Forwarded-Proto https if https

I have attached a picture of what it looks like in the GUI if any one is interested.

I have since made other changes to accommodate a separate unrelated webserver, this appears to have broken SSL on my local network when I use the URL, IP still works. So I will be doing some more fine tuning.

thanks again for the help