django.request WARNING Unauthorized: /api/***

Thovi98

Hello,

First of all, thanks for Funkwhale 1.3.0! It works like a charm on my Yunohost instance.

Unforunately, other Yunohost users are not as lucky as me and have some trouble (they cannot play tracks) after they update to 1.3.0.

In their nginx logs, there are a lot of failed (111: Connection refused) while connecting to upstream

some nginx logs

And their funkwhale-server.service logs contain a lot of django.request WARNING Unauthorized: /api/***/***/***

https://paste.yunohost.org/edexatikic
https://paste.yunohost.org/qajuyetefa

I really don't know how to handle this and what's missing in the Yunohost package (as it works for me).

Is it a nginx issue? A python issue? A Funkwhale one?

(For reference, for example: https://github.com/YunoHost-Apps/funkwhale_ynh/issues/230)

Thanks for your help 😃

gcrk

Hi, is there an easy way to get access to a yuno host instance? I doubt the warnings are the issues, its rather an issue with the listen endpoint which doesn't seem to be listed in the logs...

Everything else is working? Like cover arts and everything?

Thovi98

gcrk Thanks for your answer.

Hi, is there an easy way to get access to a yuno host instance?

As a user or as an admin?

Everything else is working? Like cover arts and everything?
I think so, yes.

After a look at the docs for the update instructions, I've noticed that our upgrade script doesn't first delete the api/* and front/* folders. May this be a issue?

Should I temporarily change de logs level to debug to have a better idea of the situation?

gcrk

Thovi98 As a user or as an admin?

In the best case SSH so I can debug 🙂

Thovi98 After a look at the docs for the update instructions, I've noticed that our upgrade script doesn't first delete the api/* and front/* folders. May this be a issue?

Might be, but thats guessing.

I already chimed into the Github issue you linked, maybe we can focus on one space for the discussion? I am fine with communicating on your Github in this regard

Thovi98

Update:
I’ve corrected the nginx conf for Yunohost to make it work!
The issue was that only the --in-place imports were abled to be loaded.

The uploaded tracks were not correctly handled by nginx with the default nginx.template values.
I had to modify

location ~ /_protected/media/(.+) {
to
location /_protected/media/ {

Now it seems to work, but I don’t know if there are negative consequences.

gcrk

@JuniorJPDJ Do you have any idea here?

gcrk

@Thovi98 Hi, I saw you managed to solve the issue, which is great! I am sorry that I wasn't more of a help here. Feel free to mark the thread as solved if there are no further questions.

Thovi98

No worry, it was interesting to see how to solve the issue.
So the only issue was a wrong nginx conf as said before.

But before closing, I would be glad to understand if what I did is a good workaround or if I missed something 🙂

gcrk

@Thovi98 I am wondering why the regex isn't working, what version of nginx do you use? I don't think this has any bad implications, but nginx-questions are better answered by @JuniorJPDJ

Thovi98

gcrk what version of nginx do you use?

1.18.0
I may try again after upgrading Yunohost to Bookworm 🙂

JuniorJPDJ

In non-s3 setup this regexp is not used to anything anyway so it's ok to change it.

Just remove $1 from line below in alias like it's done in /_protected/music/.

Thovi98

JuniorJPDJ

Okay thanks for your input!
I will leave it like that then, thanks!

gcrk

@[deleted] I do not really understand why the regex doesn't work, though, any ideas?

@[deleted] What if someone using Yunohost wants to use a S3 storage backend?

gcrk

@JuniorJPDJ I do not really understand why the regex doesn't work, though, any ideas?

@Thovi98 What if someone using Yunohost wants to use a S3 storage backend?

Thovi98

gcrk @Thovi98 What if someone using Yunohost wants to use a S3 storage backend?

Yes indeed, it would be a problem… But for now as nobody complains about that, I will let it as it is now, and maybe will try again later (or soon if some new reasons come around) 😇