Calibre-Web v0.6.21 failing to finish authentication with timeout while behind cloudflare

[JValentine9]

Describe the bug/problem
I am serving Calibre-Web through Nginx Proxy Managed, accessed through Cloudflare. I am able to utilize the site well locally, but I am unable to login when accessing the server through Cloudflare. I also have Authelia running to provide security for the site when accessing through Cloudflare due to this process

To Reproduce
Steps to reproduce the behavior:
Setup and Configure Calibre-Web
Configure NGINX Proxy Manager as a reverse proxy
Configure the traffic to flow through a cloudflare tunnel so it is accessible on the web through Cloudflare
Attempt to login to Calibre-Web
Get the Timeout error screen from Cloudflare

Logfile
calibre-web.log
access.log

Expected behavior

Login as anticipated

Screenshots

Environment (please complete the following information):

• OS: [Unraid 6.12.10]
• Python version: [e.g. python2.7]
• Calibre-Web version: [0.6.21]:
• Docker container: [LinuxServer]:
• Browser: [Chrome 83.0.4103.97]

Additional context

[OzzieIsaacs]

Sorry man: You gave the answer by yourself: "I am able to utilize the site well locally".
I'm maintaining calibre-web and not your setup around it. As you wrote this is working. The only think I can suggest is to change the session protection in the admin section -> basic configuration -> security to "simple", with little hope that it helps.
I will leave the issue open for some time, maybe somebody else can help you (my feeling is no)

[vysmaty]

Hi @JValentine9 , I have the following setup
Cloudflare DNS ->
Cloudflare with ZeroTrust+SSO ->
Cloudflare Tunnel pointing to Traefik:81 (HTTP)!
Traefik pointing to calibre-web (HTTP)!

Traffic outside the tunnel then goes from Traefik over HTTPS and HTTP has a rewrite to HTTPS.

I've had it this long. So I don't remember the specific settings. Cloudflare login works. (SSO and also Calibre-Web). Session protection I have Strong.

I'd guess your problem is somewhere along the way at SSL. If you're capable, you could also look at Trusted Hosts (Comma Separated) in the Calibre-Web settings.

I would rather not look for glitch down in calibre-web.

That's all I can do.

And thank you very much @OzzieIsaacs for calibre-web. ;)

[JValentine9]

@OzzieIsaacs Absolutely thanks for all your work! Didn't want this to necessarily be a feature or please fix, just wasn't sure where else to go for community questions - I figured I just had something wrong. @vysmaty thanks for the info! I'll take a look at it!