Attachments download not working

[fmnamado]

Hello all,

I am using Vautlwarden selfhosted, with proxy manager Nginx Proxy Manager (NPM).
I get my certificates via duckdns DNS challenge.
I can't seem to get attachments download to work.
I can attach, but I can't download any attachment.

I tried a lot of things (custom configs, bla bla), and my last resource, before this one, was using the help of our beloved ChatGPT.

He told me NPM, and not the fill fledged Nginx, cannot process all the headers and so won't work.

Before losing (MORE) time, can someone enlighten me, if NPM can work with Vaulwarden attachments?

Has anyone managed to get this working?
Vaultwarden+NPM with attachments downloading?
Or it is impossible (this config) has chat GPT told me?

Thank you!

[stefan0xC]

Have you configured the DOMAIN to be the base URL of your instance?

vaultwarden/.env.template

Lines 194 to 197 in 7878228

	## Domain settings
	## The domain must match the address from where you access the server
	## It's recommended to configure this value, otherwise certain functionality might not work,
	## like attachment downloads, email links and U2F.

And can you check the /admin/diagnostics page if there are any errors and share the support string which you can generate on that page? Cf. Enabling admin page for more information.

[fmnamado]

I think I have.
If it wasn't, would the webgui work, or a bad config in the domain would only break attachments?

Webgui webpage (login, edit and upload attachment works flawlessly):

Portainer stack (please see my / comment):

"/admin" page:

and

Nginx Proxy Manager Reverse Proxy config page:

and

and

and

(in the beggining, before trying to troubleshoot this attachments problem, I only got FORCE SSL enabled here, I have been trying different things because of internet information I got)
and

Nothing right now but I already tried

proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header X-Forwarded-Proto $scheme; proxy_set_header X-Forwarded-Host $host; proxy_http_version 1.1; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection "upgrade"; client_max_body_size 200M;

and

proxy_set_header X-Forwarded-Host $host; proxy_set_header X-Forwarded-Proto $scheme; client_max_body_size 525M;

Among others, via Chat GPT suggestion.
I have almost no knowledge regarding to proxy managers, usually I follow something and try, as you can see.

I always get this kind of info in the broswer after trying to download an attachment.
No errror , just nothing happens, I can only see in the Dev tools.

!!!!!!!!!! -MIND-BLOWN- (????)
Right now, I was downloading a file so I could print screen the "fetch" error in Google Chrome with F12, in network tab, as yesterday I saw.
Now the file download worked, the json encrypted export worked (yesterday already did) and zip export worked (yesterday it DID NOT work).

I will keep below the text I already wrote before this:

-> #### ALREADY WRITTEN BEFORE WORKING - Begin ####
Has the above answered to your guessings?

Bear in mind that, despite troubleshooting, which I thank you, my original question remains:
would Nginx Proxy Manager work with bitwarden with attachments, or Chat GPT is right and I have to move over to another Proxy Manager for reverse proxy, whether Nginx (non-NPM) or Traefik?

-> #### ALREADY WRITTEN BEFORE WORKING - End ####

Well it seems NPM works.
I have not changed nothing than yesterday.
Either it's an issue of DNS Challenge/Solving, which I know I have (I have other similar problems, sometimes DNS stalls), or it was something restarting or refreshing.
I have not restarted the host, docker, the nginx of vaultwarden container since yesterday when it was not working.

Any comment you might add?
Thank you once again and sorry for the kind of messy text.

[stefan0xC]

Not really. Since we don't have any documentation for NPM in our proxy examples I am not sure on what the answers would be based on but as far as I know it should just be just a frontend for nginx and thus it should just work. In general I would caution against uncritically relying on the unqualified opinions of ChatGPT. As far as I am concerned it does not have the ability to discern the soundness of the sources it regurgitates and thus should not be relied on as an oracle.

[fmnamado]

I understand your comments on AI, but I am talking about a selfhosted envornment, where I am the sole user.
It is not exposed to the internet.
I do not have the knowledge, and ATM don't have the time or energy to learn about proxy managers.
I am in the middle of making an emergency/backup protocol for my credentials.

If I came to a forum whenever I had a doubt or no knowledge about some subject.. I would be still learning how to format a disquette 💾

it is not my oracle, the true one already passed away in 2001 😄

But thank you once again for your advice and help.