MIME-Version: 1.0
References: 
 <CAKZfs-q0xwvyL5mQ5-Q5cMSzK0bHa03VjeNRzyCBVze-fa_CeQ@mail.gmail.com>
In-Reply-To: 
 <CAKZfs-q0xwvyL5mQ5-Q5cMSzK0bHa03VjeNRzyCBVze-fa_CeQ@mail.gmail.com>
From: Yogesh Mahajan <yogesh.mahajan@enterprisedb.com>
Date: Tue, 10 Jun 2025 15:25:46 +0530
Message-ID: 
 <CAMa=N=PgeekhtrE+bJn2atLui8sqqSDxdD3ScqSCMws+WenjOQ@mail.gmail.com>
Subject: Re: Issue with pgAdmin 4 Login Behind NGINX Reverse Proxy at
 /pgadmin4 Path
To: Shakir Idrisi <shakir@webuzo.com>
Cc: support@lists.postgresql.org, pgadmin-support@lists.postgresql.org
Content-Type: multipart/alternative; boundary="0000000000007c7e66063734b589"
Archived-At: 
 <https://www.postgresql.org/message-id/CAMa%3DN%3DPgeekhtrE%2BbJn2atLui8sqqSDxdD3ScqSCMws%2BWenjOQ%40mail.gmail.com>
Precedence: bulk

--0000000000007c7e66063734b589
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

Hi,

Can you please share your guicorn command?
How many workers are you spawning? It should be 1.

Thanks,
Yogesh Mahajan
EnterpriseDB


On Tue, Jun 10, 2025 at 12:34=E2=80=AFPM Shakir Idrisi <shakir@webuzo.com> =
wrote:

> Hi,
>
> I've installed *pgAdmin 4* on my Linux server and configured it behind *G=
unicorn
> and NGINX*, accessible at:
> https://domain.com/pgadmin4/.
>
> The login page loads correctly. However, after entering valid credentials=
,
> I'm redirected back to the login page without any error message.
> Occasionally, I see a *CSRF token* error, which disappears after a page
> refresh, but the login still fails.
>
> In the browser console or network tab, I sometimes see 401 errors or
> issues loading static assets.
>
> Here's the NGINX configuration I'm currently using to reverse proxy
> pgAdmin via a Unix socket:
>
> *nginx*
> location /pgadmin4/ {
>     proxy_pass http://unix:/tmp/pgadmin4.sock:/;
>
>     # Proxy headers
>     proxy_set_header Host $host;
>     proxy_set_header X-Real-IP $remote_addr;
>     proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
>     proxy_set_header X-Forwarded-Proto $scheme;
>
>     # Inform pgAdmin it's served under a subpath
>     proxy_set_header X-Script-Name /pgadmin4;
>
>     # Optional: timeouts and static asset handling
>     proxy_read_timeout 300;
>     proxy_connect_timeout 60;
> }
>
> Could you please advise:
>
>    1.
>
>    Is there something wrong with the proxy setup?
>    2.
>
>    Do I need to handle static assets or cookies differently when using a
>    subpath (/pgadmin4)?
>    3.
>
>    Are there any additional settings required in the pgAdmin config to
>    work correctly behind a sub-URI with NGINX?
>
> Thanks in advance for your guidance.
>

--0000000000007c7e66063734b589
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div><div style=3D"font-family:verdana,sans-serif;font-siz=
e:small" class=3D"gmail_default">Hi,</div><div style=3D"font-family:verdana=
,sans-serif;font-size:small" class=3D"gmail_default"><br></div><div style=
=3D"font-family:verdana,sans-serif;font-size:small" class=3D"gmail_default"=
>Can you please share your guicorn command?=C2=A0</div><div style=3D"font-f=
amily:verdana,sans-serif;font-size:small" class=3D"gmail_default">How many =
workers are you=C2=A0spawning? It should be 1.</div><br clear=3D"all"></div=
><div><div dir=3D"ltr" class=3D"gmail_signature" data-smartmail=3D"gmail_si=
gnature"><div dir=3D"ltr"><font face=3D"verdana, sans-serif">Thanks,</font>=
<div><font face=3D"verdana, sans-serif">Yogesh Mahajan</font></div><div><fo=
nt face=3D"verdana, sans-serif">EnterpriseDB<br></font></div></div></div></=
div><br></div><br><div class=3D"gmail_quote gmail_quote_container"><div dir=
=3D"ltr" class=3D"gmail_attr">On Tue, Jun 10, 2025 at 12:34=E2=80=AFPM Shak=
ir Idrisi &lt;<a href=3D"mailto:shakir@webuzo.com">shakir@webuzo.com</a>&gt=
; wrote:<br></div><blockquote class=3D"gmail_quote" style=3D"margin:0px 0px=
 0px 0.8ex;border-left-width:1px;border-left-style:solid;border-left-color:=
rgb(204,204,204);padding-left:1ex"><div dir=3D"ltr"><div><p>Hi,</p>
<p>I&#39;ve installed <strong>pgAdmin 4</strong> on my Linux server and con=
figured it behind <strong>Gunicorn and NGINX</strong>, accessible at:<br>
<code><a href=3D"https://domain.com/pgadmin4/" target=3D"_blank">https://do=
main.com/pgadmin4/</a></code>.</p>
<p>The login page loads correctly. However, after entering valid credential=
s, I&#39;m redirected back to the login page without any error message. Occ=
asionally, I see a <strong>CSRF token</strong> error, which disappears afte=
r a page refresh, but the login still fails.</p>
<p>In the browser console or network tab, I sometimes see <code>401</code> =
errors or issues loading static assets.</p>
<p>Here&#39;s the NGINX configuration I&#39;m currently using to reverse pr=
oxy pgAdmin via a Unix socket:</p>
<pre><div><div><b>nginx</b></div><div dir=3D"ltr"><code><span>location</spa=
n> /pgadmin4/ {
    <span>proxy_pass</span> http://unix:/tmp/pgadmin4.sock:/;

    <span># Proxy headers</span>
    <span>proxy_set_header</span> Host <span>$host</span>;
    <span>proxy_set_header</span> X-Real-IP <span>$remote_addr</span>;
    <span>proxy_set_header</span> X-Forwarded-For <span>$proxy_add_x_forwar=
ded_for</span>;
    <span>proxy_set_header</span> X-Forwarded-Proto <span>$scheme</span>;

    <span># Inform pgAdmin it&#39;s served under a subpath</span>
    <span>proxy_set_header</span> X-Script-Name /pgadmin4;

    <span># Optional: timeouts and static asset handling</span>
    <span>proxy_read_timeout</span> <span>300</span>;
    <span>proxy_connect_timeout</span> <span>60</span>;
}
</code></div></div></pre>
<p>Could you please advise:</p>
<ol>
<li>
<p>Is there something wrong with the proxy setup?</p>
</li>
<li>
<p>Do I need to handle static assets or cookies differently when using a su=
bpath (<code>/pgadmin4</code>)?</p>
</li>
<li>
<p>Are there any additional settings required in the pgAdmin config to work=
 correctly behind a sub-URI with NGINX?</p>
</li>
</ol>
<p>Thanks in advance for your guidance.</p></div></div>
</blockquote></div>

--0000000000007c7e66063734b589--