Nginx-proxy-manager: AccessList doesn't work / Force SSL doesn't work

[spoolr]

Describe the bug

• Access List doesn't work at all. I have never managed to see an authentication box with or without custom location .
• Force SSL doesn't work with custom location

To Reproduce

1. I created a Proxy Host with SSL, I have Force SSL set. I can only visit with HTTPS. Great.
2. Now I added an Access List with just one user and password and now my HTTPS is 403 Forbidden. I am never prompted to authenticate it's always 403 Forbidden
3. If I change the Access List to "Satisfy Any" and add my IP with "192.168.0.0/24" it is still 403 Forbidden.
4. Either Access Lists don't work, or I don't understand them.
5. If I create a Custom Location for this Proxy so that accessing / goes to /folder
   
   
   
   • the Access List no longer generates 403 Forbidden and the site is open to all
   
   
   • Force SSL no longer works, I can browse with HTTP
   
   

As I've been typing this I've found the Access List not working with Custom Location bug report. I see it's going back to last year. For a security problem that's really a long time. Now combine that with Force SSL also being broken, another security problem. It had me convinced this project had become abandoned, yet there is life with multiple updates this year. It's true that most apps do there own security, but I have a few like COPS that could benefit from a working Access List. Please try and address these issues in the next release.

[spoolr]

After playing around some more I've come to the realization that even though this offers a fancy GUI interface, changes to the Access List will not cause nginx to reload. This is why the changes are not reflected. If you make changes to the Access List, you will need to save the Proxy as well to force nginx to reload. There are no indications of what action will force a reload aside from looking at the logs.

After many days of struggling with this program that I thought would save me time from learning to configure nginx directly, I have downloaded Caddy, and with two simple lines in plain english my reverse proxy just worked.

[hasangnu]

Force SSL doesn't work with custom location

I had a similar problem with proxy_pass. maybe force ssl when you add include conf.d/include/force-ssl.conf;

my custon nginx configuration.

location / {
    include conf.d/include/force-ssl.conf;
    proxy_pass http://domain:port/url/;
    proxy_set_header Upgrade $http_upgrade;
    proxy_set_header Connection $http_connection;
    proxy_http_version 1.1;
}

[TPham92]

Any updates/work around on this? When using Access list it never prompted to authenticate it's always 403 Forbidden. It not consistent, some time it works some time not.

[graydonpleasants]

I also have this issue when adding a new proxy with access pointing to an existing Access List, Publicly accessible works just fine.

[hsindrup]

Hi all
I am (allmost) sure, that IP in acces lists only can contain public addresses.. I.e. your one public address will only allow your home network to acces

https://www.youtube.com/watch?v=UfCkwlPIozw

Mary Christmas