404 with director behind reverse proxy

[TheZoker]

Hi there,

I'm working within an environment, where only port 80 and 443 are publicly available. So I added a nginx reverse proxy in front of the dashboard (and included basic auth) and also for the api (available from /api).
I'm now also trying to get the director to work behind a reverse proxy, but I can't manage to do so.
Here is my nginx config:

http {
    server {
        listen 80;
        server_name domain.com;

        location / {
            return 301 https://$host$request_uri;
        }
    }

    server {
        listen 443 ssl;
        server_name domain.com;

        ssl_certificate /etc/certificates/fullchain.pem;
        ssl_certificate_key /etc/certificates/privkey.pem;
        ssl_protocols TLSv1.2 TLSv1.3;
        ssl_ciphers 'TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384';
        ssl_prefer_server_ciphers on;

        location / {
            proxy_pass http://dashboard:8080;
            proxy_set_header Host $host;
            proxy_set_header X-Real-IP $remote_addr;
            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
            proxy_set_header X-Forwarded-Proto $scheme;
            proxy_buffering off;
            proxy_redirect off;

            auth_basic "Restricted";
            auth_basic_user_file /etc/nginx/.htpasswd;
        }

        location /api {
            proxy_pass http://api:4000;
            proxy_http_version 1.1;
            proxy_set_header Upgrade $http_upgrade;
            proxy_set_header Connection 'upgrade';
            proxy_set_header Host $host;
            proxy_cache_bypass $http_upgrade;
        }

        location /director {
            proxy_pass http://director:1234;
            proxy_http_version 1.1;
            proxy_set_header Upgrade $http_upgrade;
            proxy_set_header Connection 'upgrade';
            proxy_set_header Host $host;
            proxy_cache_bypass $http_upgrade;
        }
    }
}

events { }

When I browse domain.com/director I get a 404 error (usually it redirect to this github project).
In the director docker container, I can see the following logs:

{"level":30,"time":1683736044344,"req":{"id":4,"method":"GET","url":"/director","query":{},"params":{},"headers":{"connection":"upgrade","host":"domain.com","authorization":"Basic token","sec-ch-ua":"\"Brave\";v=\"113\", \"Chromium\";v=\"113\", \"Not-A.Brand\";v=\"24\"","sec-ch-ua-mobile":"?0","sec-ch-ua-platform":"\"Windows\"","upgrade-insecure-requests":"1","user-agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.0.0 Safari/537.36","accept":"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8","sec-gpc":"1","accept-language":"en;q=0.7","sec-fetch-site":"none","sec-fetch-mode":"navigate","sec-fetch-user":"?1","sec-fetch-dest":"document","accept-encoding":"gzip, deflate, br"},"remoteAddress":"::ffff:172.18.0.6","remotePort":46100},"res":{"statusCode":404,"headers":{"x-powered-by":"Express","content-security-policy":"default-src 'none'","x-content-type-options":"nosniff","content-type":"text/html; charset=utf-8","content-length":147}},"responseTime":2,"msg":"request completed"}

When I try to run cypress against this endpoint, I also get a 404 error:

> npx cypress-cloud run --parallel --record --key my-key--ci-build-id my-cloud


====================================================================================================

Discovered 34 spec files
Tags: false; Group: false; Parallel: true; Batch Size: 3
Connecting to cloud orchestration service...
 ERROR  Request failed with status code 404

How can I fix that? Is something missing within my reverse proxy?

Thanks!

[TheZoker]

I found a solution 🎉

Instead of writing:

location /director {
    proxy_pass http://director:1234;
    proxy_http_version 1.1;
    proxy_set_header Upgrade $http_upgrade;
    proxy_set_header Connection 'upgrade';
    proxy_set_header Host $host;
    proxy_cache_bypass $http_upgrade;
}

I had to write:

location /director {
    rewrite ^/director(/?.*)$ $1 break;                 // This line is important
    proxy_pass http://director:1234;
    proxy_set_header Host $host;
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header X-Forwarded-Proto $scheme;
    proxy_buffering off;
    proxy_redirect off;
}