I
Immich2y ago
NeZios

Oauth Immich with Authentik

Hi everyone I am trying to setup Authentik Oauth with Immich. Everything works fine when I put in the ISSUER URL the local IP address of my authentik issuer. (see screenshot1) But when I put my domain name accessible from outside it doesn't work anymore : I get the error"Unable to complete OAuth login" (see screenshot) Of course my domain name auth.domaine.com is accessible from outside. I am using Nginx Proxy Manager (screen) Thanks in advance for your help
No description
No description
No description
18 Replies
NeZios
NeZiosOP2y ago
Here is the logs of immich-server
bo0tzz
bo0tzz2y ago
Are they both running on the same server? Immich can't reach authentik by its external ip
NeZios
NeZiosOP2y ago
Unraid user here Yes they are both on the same server. Using 2 different network with Immich compose stack
No description
bo0tzz
bo0tzz2y ago
And is 213.etc the ip of the unraid server? Or of your router?
NeZios
NeZiosOP2y ago
Not of my server nor my router
No description
NeZios
NeZiosOP2y ago
I have no idea what is 213.x ip address Can it be OVH ip address? (where I bought my domain name)
jrasm91
jrasm912y ago
It is probably your public ip The OAuth issuer url and server needs to be reachable from the client (web or mobile app) and the immich-server container. It sounds like you can't get both to work at the same time. Can you login with your phone using mobile data (no wifi) when the issuer url is set to your hostname not IP?
NeZios
NeZiosOP2y ago
No description
NeZios
NeZiosOP2y ago
No description
NeZios
NeZiosOP2y ago
Same error
jrasm91
jrasm912y ago
Oh right that's still accessing locally from the container How does your web session resolve the hostname for the auth server? What is different about that vs the container
NeZios
NeZiosOP2y ago
I don’t know how to find this information
Allram
Allram2y ago
Do you use Authentik for other purposes? So that you know it works. Can you try to replace the port-settings in NPM to https and port 9443 for Authentik?
NeZios
NeZiosOP2y ago
Immich is the first docker application that I am trying to use I am gonna try that
NeZios
NeZiosOP2y ago
No description
NeZios
NeZiosOP2y ago
Still same issue :/
No description
Allram
Allram2y ago
I think you have connection issues between the Immich network and "blancnet" that Authentik is in. I will test some more on my Unraid server in a few hours if that helps 👍
NeZios
NeZiosOP2y ago
Solved the issue by migrating my DNS to cloudflare

Did you find this page helpful?