search

LibrePhotos / librephotos

A self-hosted open source photo management service. This is the repository of the backend.
MIT License
6.98k stars 306 forks source link

proxy getting forbidden error from backend #803

Open banigithub-2 opened 1 year ago

banigithub-2 commented 1 year ago

Apologies if this is a stupid mistake on my part, or if the answer is in the documentation somewhere, but I promise I've spent about 20 hours looking and can't find an answer. I fully expect this is an implementation issue - something related to running it on a QNAP NAS perhaps? Anyway, I'd be very grateful if anyone has the time to suggest something I can try to fix this up.

The NAS is a QNAP TS-453Be, with a quad core Celeron J3455, in case that matters.

I'm running a standard docker setup on the NAS, and have used the docker-compose / .env process. Other than changing the proxy listen port to something unused, and trying both latest and dev tags, the .env settings are otherwise unchanged.

librephotos all appears to be working OK: scans the pictures, can build the wordcloud, seems to find 'things' in the images, identifies faces etc. The issue is that as a user, you can't actually view any images. They all appear as a coloured box (different colours interestingly); clicking on one will bring up a black/transparent overlay; clicking the 'info' icon on that screen will display accurate info about the image, and even show the little map of where the image was taken. If you use the link to the image name on that page, you get a nginx/1.23.3 error 403 forbidden.

Are the files actually accessible/have the correct permissions? Well - I've copied some pictures (a small sample of 298 phone pictures) into a directory located under the docker root for librephotos, and run a chmod 777 recursively that folder. Have confirmed that backend can access the pictures. Logged into the NAS, the folder looks like this: drwxrwxrwx 3 admin administrators 4096 2023-03-27 21:59 Pictures/ Logged into the console of the backend container, it looks like this: drwxrwxrwx+ 3 root root 4096 Mar 27 20:59 data

If I select one or more pictures in librephotos and use the context menu to download them, that works just fine.

Having been banging my head against this for a little while, I reached the point of using curl inside a console window of proxy to try to fetch the image, and can reproduce the forbidden error, and see this error in the backend logs: (in proxy console:) curl http://backend:8001/media/photos/69b0b687c2d900bcf9ee0e01fc36b4d41.webp (in backend log:) Forbidden: /media/photos/69b0b687c2d900bcf9ee0e01fc36b4d41.webp (if I use curl to get a file that I know doesn't exist, I do get a file not found error instead).

Proxy log extract:

2023/03/27 21:50:09 [info] 29#29: *56053 epoll_wait() reported that client prematurely closed connection, so upstream connection is closed too while sending request to upstream, client: 192.168.27.100, server: , request: "GET /media/square_thumbnails/69b0b687c2d900bcf9ee0e01fc36b4d41 HTTP/1.1", upstream: "http://172.29.40.5:8001/media/square_thumbnails/69b0b687c2d900bcf9ee0e01fc36b4d41", host: "librephotos:40440", referrer: "http://librephotos:40440/"
2023/03/27 21:50:09 [error] 29#29: *56080 open() "/protected_media/square_thumbnails/69b0b687c2d900bcf9ee0e01fc36b4d41.webp" failed (13: Permission denied), client: 192.168.27.100, server: , request: "GET /media/square_thumbnails/69b0b687c2d900bcf9ee0e01fc36b4d41 HTTP/1.1", upstream: "http://172.29.40.5:8001/media/square_thumbnails/69b0b687c2d900bcf9ee0e01fc36b4d41", host: "librephotos:40440", referrer: "http://librephotos:40440/"
derneuere commented 1 year ago

To allow for faster loading times, LibrePhotos generates thumbnails. You don't see the actual pictures in the web view, but these smaller thumbnails. It looks like the proxy / nginx does not have access to the thumbnail folder (protected_media). Could you check what kinds of permissions this folder has?

loulou91 commented 1 year ago

It may be a question of special character in the path name of the file (é for instance). I encounter this issue.

banigithub-2 commented 1 year ago

Thanks for taking the time to reply :-) Was: drwxr-xr-x 6 admin administrators 4.0K 2023-03-27 17:15 protected_media/ Now: drwxrwxrwx 6 admin administrators 4.0K 2023-03-27 17:15 protected_media/ Ran a re-scan; doesn't appear to have fixed it.

If I use the console of proxy, I can certainly get into that folder and alter files; if I touch file it looks like this from the NAS: -rw-rw---- 1 admin administrators 0 2023-03-28 20:15 file

Dumb question: does nginx run as root in the proxy container?

If I hit F5 in the browser on the default librephotos Photos page, this is what the proxy log file looks like; not sure if there are any clues here?

192.168.27.105 - - [28/Mar/2023:19:19:15 +0000] "GET /api/user/ HTTP/1.1" 200 2227 "http://gingertom:40440/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/111.0"
192.168.27.105 - - [28/Mar/2023:19:19:15 +0000] "GET /api/user/1/ HTTP/1.1" 200 2175 "http://gingertom:40440/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/111.0"
192.168.27.105 - - [28/Mar/2023:19:19:15 +0000] "GET /api/searchtermexamples/ HTTP/1.1" 401 89 "http://gingertom:40440/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/111.0"
192.168.27.105 - - [28/Mar/2023:19:19:15 +0000] "GET /api/albums/place/list/ HTTP/1.1" 401 89 "http://gingertom:40440/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/111.0"
192.168.27.105 - - [28/Mar/2023:19:19:15 +0000] "GET /api/albums/thing/list/ HTTP/1.1" 401 89 "http://gingertom:40440/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/111.0"
192.168.27.105 - - [28/Mar/2023:19:19:15 +0000] "GET /api/albums/user/list/ HTTP/1.1" 401 89 "http://gingertom:40440/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/111.0"
192.168.27.105 - - [28/Mar/2023:19:19:15 +0000] "GET /api/persons/?page_size=1000 HTTP/1.1" 401 89 "http://gingertom:40440/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/111.0"
192.168.27.105 - - [28/Mar/2023:19:19:15 +0000] "GET /api/sitesettings HTTP/1.1" 200 109 "http://gingertom:40440/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/111.0"
192.168.27.105 - - [28/Mar/2023:19:19:15 +0000] "GET /api/dirtree/?path= HTTP/1.1" 401 89 "http://gingertom:40440/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/111.0"
192.168.27.105 - - [28/Mar/2023:19:19:15 +0000] "GET /api/albums/date/list/ HTTP/1.1" 401 89 "http://gingertom:40440/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/111.0"
192.168.27.105 - - [28/Mar/2023:19:19:15 +0000] "POST /api/auth/token/refresh/ HTTP/1.1" 200 473 "http://gingertom:40440/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/111.0"
192.168.27.105 - - [28/Mar/2023:19:19:15 +0000] "POST /api/auth/token/refresh/ HTTP/1.1" 200 473 "http://gingertom:40440/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/111.0"
192.168.27.105 - - [28/Mar/2023:19:19:15 +0000] "POST /api/auth/token/refresh/ HTTP/1.1" 200 473 "http://gingertom:40440/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/111.0"
192.168.27.105 - - [28/Mar/2023:19:19:15 +0000] "POST /api/auth/token/refresh/ HTTP/1.1" 200 473 "http://gingertom:40440/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/111.0"
192.168.27.105 - - [28/Mar/2023:19:19:15 +0000] "POST /api/auth/token/refresh/ HTTP/1.1" 200 473 "http://gingertom:40440/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/111.0"
192.168.27.105 - - [28/Mar/2023:19:19:15 +0000] "POST /api/auth/token/refresh/ HTTP/1.1" 200 473 "http://gingertom:40440/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/111.0"
192.168.27.105 - - [28/Mar/2023:19:19:15 +0000] "POST /api/auth/token/refresh/ HTTP/1.1" 200 473 "http://gingertom:40440/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/111.0"
192.168.27.105 - - [28/Mar/2023:19:19:15 +0000] "GET /api/searchtermexamples/ HTTP/1.1" 200 974 "http://gingertom:40440/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/111.0"
192.168.27.105 - - [28/Mar/2023:19:19:15 +0000] "GET /api/albums/place/list/ HTTP/1.1" 200 52 "http://gingertom:40440/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/111.0"
192.168.27.105 - - [28/Mar/2023:19:19:15 +0000] "GET /api/albums/user/list/ HTTP/1.1" 200 52 "http://gingertom:40440/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/111.0"
192.168.27.105 - - [28/Mar/2023:19:19:15 +0000] "GET /api/persons/?page_size=1000 HTTP/1.1" 200 52 "http://gingertom:40440/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/111.0"
192.168.27.105 - - [28/Mar/2023:19:19:16 +0000] "GET /api/dirtree/?path= HTTP/1.1" 200 448 "http://gingertom:40440/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/111.0"
192.168.27.105 - - [28/Mar/2023:19:19:16 +0000] "GET /api/albums/date/list/ HTTP/1.1" 200 20116 "http://gingertom:40440/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/111.0"
192.168.27.105 - - [28/Mar/2023:19:19:16 +0000] "GET /api/albums/date/40/?page=1 HTTP/1.1" 200 438 "http://gingertom:40440/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/111.0"
192.168.27.105 - - [28/Mar/2023:19:19:16 +0000] "GET /api/albums/thing/list/ HTTP/1.1" 200 34655 "http://gingertom:40440/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/111.0"
2023/03/28 19:19:16 [info] 29#29: *58484 epoll_wait() reported that client prematurely closed connection, so upstream connection is closed too while sending request to upstream, client: 192.168.27.105, server: , request: "GET /media/square_thumbnails_small/8f4e467d166f8bb0f5112e0212ba9e671 HTTP/1.1", upstream: "http://172.29.40.5:8001/media/square_thumbnails_small/8f4e467d166f8bb0f5112e0212ba9e671", host: "gingertom:40440", referrer: "http://gingertom:40440/"
2023/03/28 19:19:16 [info] 29#29: *58485 epoll_wait() reported that client prematurely closed connection, so upstream connection is closed too while sending request to upstream, client: 192.168.27.105, server: , request: "GET /media/square_thumbnails/8f4e467d166f8bb0f5112e0212ba9e671 HTTP/1.1", upstream: "http://172.29.40.5:8001/media/square_thumbnails/8f4e467d166f8bb0f5112e0212ba9e671", host: "gingertom:40440", referrer: "http://gingertom:40440/"
192.168.27.105 - - [28/Mar/2023:19:19:16 +0000] "GET /media/square_thumbnails_small/8f4e467d166f8bb0f5112e0212ba9e671 HTTP/1.1" 499 0 "http://gingertom:40440/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/111.0"
192.168.27.105 - - [28/Mar/2023:19:19:16 +0000] "GET /media/square_thumbnails/8f4e467d166f8bb0f5112e0212ba9e671 HTTP/1.1" 499 0 "http://gingertom:40440/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/111.0"
2023/03/28 19:19:17 [error] 29#29: *58331 open() "/protected_media/square_thumbnails_small/8f4e467d166f8bb0f5112e0212ba9e671.webp" failed (13: Permission denied), client: 192.168.27.105, server: , request: "GET /media/square_thumbnails_small/8f4e467d166f8bb0f5112e0212ba9e671 HTTP/1.1", upstream: "http://172.29.40.5:8001/media/square_thumbnails_small/8f4e467d166f8bb0f5112e0212ba9e671", host: "gingertom:40440", referrer: "http://gingertom:40440/"
192.168.27.105 - - [28/Mar/2023:19:19:17 +0000] "GET /media/square_thumbnails_small/8f4e467d166f8bb0f5112e0212ba9e671 HTTP/1.1" 403 153 "http://gingertom:40440/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/111.0"
2023/03/28 19:19:17 [error] 29#29: *58491 open() "/protected_media/square_thumbnails/8f4e467d166f8bb0f5112e0212ba9e671.webp" failed (13: Permission denied), client: 192.168.27.105, server: , request: "GET /media/square_thumbnails/8f4e467d166f8bb0f5112e0212ba9e671 HTTP/1.1", upstream: "http://172.29.40.5:8001/media/square_thumbnails/8f4e467d166f8bb0f5112e0212ba9e671", host: "gingertom:40440", referrer: "http://gingertom:40440/"
192.168.27.105 - - [28/Mar/2023:19:19:17 +0000] "GET /media/square_thumbnails/8f4e467d166f8bb0f5112e0212ba9e671 HTTP/1.1" 403 153 "http://gingertom:40440/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/111.0"
192.168.27.105 - - [28/Mar/2023:19:19:18 +0000] "GET /api/rqavailable/ HTTP/1.1" 200 61 "http://gingertom:40440/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/111.0"
192.168.27.105 - - [28/Mar/2023:19:19:19 +0000] "GET /api/albums/date/30/?page=1 HTTP/1.1" 200 772 "http://gingertom:40440/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/111.0"
192.168.27.105 - - [28/Mar/2023:19:19:19 +0000] "GET /media/square_thumbnails_small/de6c56d0ce9eb8201a0fbf59780d21d21 HTTP/1.1" 499 0 "http://gingertom:40440/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/111.0"
2023/03/28 19:19:19 [info] 29#29: *58331 epoll_wait() reported that client prematurely closed connection, so upstream connection is closed too while sending request to upstream, client: 192.168.27.105, server: , request: "GET /media/square_thumbnails_small/de6c56d0ce9eb8201a0fbf59780d21d21 HTTP/1.1", upstream: "http://172.29.40.5:8001/media/square_thumbnails_small/de6c56d0ce9eb8201a0fbf59780d21d21", host: "gingertom:40440", referrer: "http://gingertom:40440/"
2023/03/28 19:19:19 [info] 29#29: *58491 epoll_wait() reported that client prematurely closed connection, so upstream connection is closed too while sending request to upstream, client: 192.168.27.105, server: , request: "GET /media/square_thumbnails/de6c56d0ce9eb8201a0fbf59780d21d21 HTTP/1.1", upstream: "http://172.29.40.5:8001/media/square_thumbnails/de6c56d0ce9eb8201a0fbf59780d21d21", host: "gingertom:40440", referrer: "http://gingertom:40440/"
192.168.27.105 - - [28/Mar/2023:19:19:19 +0000] "GET /media/square_thumbnails/de6c56d0ce9eb8201a0fbf59780d21d21 HTTP/1.1" 499 0 "http://gingertom:40440/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/111.0"
2023/03/28 19:19:19 [info] 29#29: *58483 epoll_wait() reported that client prematurely closed connection, so upstream connection is closed too while sending request to upstream, client: 192.168.27.105, server: , request: "GET /media/square_thumbnails_small/5f765a95c7fe833d41ec0ff1ae7621bd1 HTTP/1.1", upstream: "http://172.29.40.5:8001/media/square_thumbnails_small/5f765a95c7fe833d41ec0ff1ae7621bd1", host: "gingertom:40440", referrer: "http://gingertom:40440/"
192.168.27.105 - - [28/Mar/2023:19:19:19 +0000] "GET /media/square_thumbnails_small/5f765a95c7fe833d41ec0ff1ae7621bd1 HTTP/1.1" 499 0 "http://gingertom:40440/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/111.0"
2023/03/28 19:19:19 [info] 29#29: *58486 epoll_wait() reported that client prematurely closed connection, so upstream connection is closed too while sending request to upstream, client: 192.168.27.105, server: , request: "GET /media/square_thumbnails/5f765a95c7fe833d41ec0ff1ae7621bd1 HTTP/1.1", upstream: "http://172.29.40.5:8001/media/square_thumbnails/5f765a95c7fe833d41ec0ff1ae7621bd1", host: "gingertom:40440", referrer: "http://gingertom:40440/"
192.168.27.105 - - [28/Mar/2023:19:19:19 +0000] "GET /media/square_thumbnails/5f765a95c7fe833d41ec0ff1ae7621bd1 HTTP/1.1" 499 0 "http://gingertom:40440/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/111.0"
2023/03/28 19:19:19 [error] 29#29: *58523 open() "/protected_media/square_thumbnails_small/de6c56d0ce9eb8201a0fbf59780d21d21.webp" failed (13: Permission denied), client: 192.168.27.105, server: , request: "GET /media/square_thumbnails_small/de6c56d0ce9eb8201a0fbf59780d21d21 HTTP/1.1", upstream: "http://172.29.40.5:8001/media/square_thumbnails_small/de6c56d0ce9eb8201a0fbf59780d21d21", host: "gingertom:40440", referrer: "http://gingertom:40440/"
192.168.27.105 - - [28/Mar/2023:19:19:19 +0000] "GET /media/square_thumbnails_small/de6c56d0ce9eb8201a0fbf59780d21d21 HTTP/1.1" 403 153 "http://gingertom:40440/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/111.0"
2023/03/28 19:19:19 [error] 29#29: *58524 open() "/protected_media/square_thumbnails/de6c56d0ce9eb8201a0fbf59780d21d21.webp" failed (13: Permission denied), client: 192.168.27.105, server: , request: "GET /media/square_thumbnails/de6c56d0ce9eb8201a0fbf59780d21d21 HTTP/1.1", upstream: "http://172.29.40.5:8001/media/square_thumbnails/de6c56d0ce9eb8201a0fbf59780d21d21", host: "gingertom:40440", referrer: "http://gingertom:40440/"
192.168.27.105 - - [28/Mar/2023:19:19:19 +0000] "GET /media/square_thumbnails/de6c56d0ce9eb8201a0fbf59780d21d21 HTTP/1.1" 403 153 "http://gingertom:40440/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/111.0"
2023/03/28 19:19:19 [error] 29#29: *58526 open() "/protected_media/square_thumbnails_small/5f765a95c7fe833d41ec0ff1ae7621bd1.webp" failed (13: Permission denied), client: 192.168.27.105, server: , request: "GET /media/square_thumbnails_small/5f765a95c7fe833d41ec0ff1ae7621bd1 HTTP/1.1", upstream: "http://172.29.40.5:8001/media/square_thumbnails_small/5f765a95c7fe833d41ec0ff1ae7621bd1", host: "gingertom:40440", referrer: "http://gingertom:40440/"
192.168.27.105 - - [28/Mar/2023:19:19:19 +0000] "GET /media/square_thumbnails_small/5f765a95c7fe833d41ec0ff1ae7621bd1 HTTP/1.1" 403 153 "http://gingertom:40440/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/111.0"
2023/03/28 19:19:19 [error] 29#29: *58528 open() "/protected_media/square_thumbnails/5f765a95c7fe833d41ec0ff1ae7621bd1.webp" failed (13: Permission denied), client: 192.168.27.105, server: , request: "GET /media/square_thumbnails/5f765a95c7fe833d41ec0ff1ae7621bd1 HTTP/1.1", upstream: "http://172.29.40.5:8001/media/square_thumbnails/5f765a95c7fe833d41ec0ff1ae7621bd1", host: "gingertom:40440", referrer: "http://gingertom:40440/"
192.168.27.105 - - [28/Mar/2023:19:19:19 +0000] "GET /media/square_thumbnails/5f765a95c7fe833d41ec0ff1ae7621bd1 HTTP/1.1" 403 153 "http://gingertom:40440/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/111.0"
192.168.27.105 - - [28/Mar/2023:19:19:19 +0000] "GET /api/albums/date/31/?page=1 HTTP/1.1" 200 772 "http://gingertom:40440/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/111.0"
192.168.27.105 - - [28/Mar/2023:19:19:19 +0000] "GET /media/square_thumbnails_small/eed475b781df1015bdd2f020ef28cd3a1 HTTP/1.1" 499 0 "http://gingertom:40440/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/111.0"
2023/03/28 19:19:19 [info] 29#29: *58531 epoll_wait() reported that client prematurely closed connection, so upstream connection is closed too while sending request to upstream, client: 192.168.27.105, server: , request: "GET /media/square_thumbnails_small/eed475b781df1015bdd2f020ef28cd3a1 HTTP/1.1", upstream: "http://172.29.40.5:8001/media/square_thumbnails_small/eed475b781df1015bdd2f020ef28cd3a1", host: "gingertom:40440", referrer: "http://gingertom:40440/"
2023/03/28 19:19:19 [info] 29#29: *58523 epoll_wait() reported that client prematurely closed connection, so upstream connection is closed too while sending request to upstream, client: 192.168.27.105, server: , request: "GET /media/square_thumbnails/eed475b781df1015bdd2f020ef28cd3a1 HTTP/1.1", upstream: "http://172.29.40.5:8001/media/square_thumbnails/eed475b781df1015bdd2f020ef28cd3a1", host: "gingertom:40440", referrer: "http://gingertom:40440/"
192.168.27.105 - - [28/Mar/2023:19:19:19 +0000] "GET /media/square_thumbnails/eed475b781df1015bdd2f020ef28cd3a1 HTTP/1.1" 499 0 "http://gingertom:40440/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/111.0"
2023/03/28 19:19:19 [info] 29#29: *58524 epoll_wait() reported that client prematurely closed connection, so upstream connection is closed too while sending request to upstream, client: 192.168.27.105, server: , request: "GET /media/square_thumbnails_small/fd51da2aa5ac020558cdfe78a0d057c61 HTTP/1.1", upstream: "http://172.29.40.5:8001/media/square_thumbnails_small/fd51da2aa5ac020558cdfe78a0d057c61", host: "gingertom:40440", referrer: "http://gingertom:40440/"
192.168.27.105 - - [28/Mar/2023:19:19:19 +0000] "GET /media/square_thumbnails_small/fd51da2aa5ac020558cdfe78a0d057c61 HTTP/1.1" 499 0 "http://gingertom:40440/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/111.0"
2023/03/28 19:19:19 [info] 29#29: *58526 epoll_wait() reported that client prematurely closed connection, so upstream connection is closed too while sending request to upstream, client: 192.168.27.105, server: , request: "GET /media/square_thumbnails/fd51da2aa5ac020558cdfe78a0d057c61 HTTP/1.1", upstream: "http://172.29.40.5:8001/media/square_thumbnails/fd51da2aa5ac020558cdfe78a0d057c61", host: "gingertom:40440", referrer: "http://gingertom:40440/"
192.168.27.105 - - [28/Mar/2023:19:19:19 +0000] "GET /media/square_thumbnails/fd51da2aa5ac020558cdfe78a0d057c61 HTTP/1.1" 499 0 "http://gingertom:40440/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/111.0"
2023/03/28 19:19:19 [error] 29#29: *58528 open() "/protected_media/square_thumbnails_small/eed475b781df1015bdd2f020ef28cd3a1.webp" failed (13: Permission denied), client: 192.168.27.105, server: , request: "GET /media/square_thumbnails_small/eed475b781df1015bdd2f020ef28cd3a1 HTTP/1.1", upstream: "http://172.29.40.5:8001/media/square_thumbnails_small/eed475b781df1015bdd2f020ef28cd3a1", host: "gingertom:40440", referrer: "http://gingertom:40440/"
192.168.27.105 - - [28/Mar/2023:19:19:19 +0000] "GET /media/square_thumbnails_small/eed475b781df1015bdd2f020ef28cd3a1 HTTP/1.1" 403 153 "http://gingertom:40440/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/111.0"
2023/03/28 19:19:19 [error] 29#29: *58538 open() "/protected_media/square_thumbnails/eed475b781df1015bdd2f020ef28cd3a1.webp" failed (13: Permission denied), client: 192.168.27.105, server: , request: "GET /media/square_thumbnails/eed475b781df1015bdd2f020ef28cd3a1 HTTP/1.1", upstream: "http://172.29.40.5:8001/media/square_thumbnails/eed475b781df1015bdd2f020ef28cd3a1", host: "gingertom:40440", referrer: "http://gingertom:40440/"
192.168.27.105 - - [28/Mar/2023:19:19:19 +0000] "GET /media/square_thumbnails/eed475b781df1015bdd2f020ef28cd3a1 HTTP/1.1" 403 153 "http://gingertom:40440/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/111.0"
2023/03/28 19:19:19 [error] 29#29: *58539 open() "/protected_media/square_thumbnails_small/fd51da2aa5ac020558cdfe78a0d057c61.webp" failed (13: Permission denied), client: 192.168.27.105, server: , request: "GET /media/square_thumbnails_small/fd51da2aa5ac020558cdfe78a0d057c61 HTTP/1.1", upstream: "http://172.29.40.5:8001/media/square_thumbnails_small/fd51da2aa5ac020558cdfe78a0d057c61", host: "gingertom:40440", referrer: "http://gingertom:40440/"
192.168.27.105 - - [28/Mar/2023:19:19:19 +0000] "GET /media/square_thumbnails_small/fd51da2aa5ac020558cdfe78a0d057c61 HTTP/1.1" 403 153 "http://gingertom:40440/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/111.0"
2023/03/28 19:19:19 [error] 29#29: *58541 open() "/protected_media/square_thumbnails/fd51da2aa5ac020558cdfe78a0d057c61.webp" failed (13: Permission denied), client: 192.168.27.105, server: , request: "GET /media/square_thumbnails/fd51da2aa5ac020558cdfe78a0d057c61 HTTP/1.1", upstream: "http://172.29.40.5:8001/media/square_thumbnails/fd51da2aa5ac020558cdfe78a0d057c61", host: "gingertom:40440", referrer: "http://gingertom:40440/"
192.168.27.105 - - [28/Mar/2023:19:19:19 +0000] "GET /media/square_thumbnails/fd51da2aa5ac020558cdfe78a0d057c61 HTTP/1.1" 403 153 "http://gingertom:40440/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/111.0"
192.168.27.105 - - [28/Mar/2023:19:19:20 +0000] "GET /api/rqavailable/ HTTP/1.1" 200 61 "http://gingertom:40440/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/111.0"
192.168.27.105 - - [28/Mar/2023:19:19:20 +0000] "GET /api/albums/date/32/?page=1 HTTP/1.1" 200 772 "http://gingertom:40440/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/111.0"
2023/03/28 19:19:20 [info] 29#29: *58538 epoll_wait() reported that client prematurely closed connection, so upstream connection is closed too while sending request to upstream, client: 192.168.27.105, server: , request: "GET /media/square_thumbnails_small/75455d6b624757f2ba43c0e99edb36731 HTTP/1.1", upstream: "http://172.29.40.5:8001/media/square_thumbnails_small/75455d6b624757f2ba43c0e99edb36731", host: "gingertom:40440", referrer: "http://gingertom:40440/"
192.168.27.105 - - [28/Mar/2023:19:19:20 +0000] "GET /media/square_thumbnails_small/75455d6b624757f2ba43c0e99edb36731 HTTP/1.1" 499 0 "http://gingertom:40440/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/111.0"
2023/03/28 19:19:20 [info] 29#29: *58539 epoll_wait() reported that client prematurely closed connection, so upstream connection is closed too while sending request to upstream, client: 192.168.27.105, server: , request: "GET /media/square_thumbnails/75455d6b624757f2ba43c0e99edb36731 HTTP/1.1", upstream: "http://172.29.40.5:8001/media/square_thumbnails/75455d6b624757f2ba43c0e99edb36731", host: "gingertom:40440", referrer: "http://gingertom:40440/"
192.168.27.105 - - [28/Mar/2023:19:19:20 +0000] "GET /media/square_thumbnails/75455d6b624757f2ba43c0e99edb36731 HTTP/1.1" 499 0 "http://gingertom:40440/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/111.0"
2023/03/28 19:19:20 [info] 29#29: *58541 epoll_wait() reported that client prematurely closed connection, so upstream connection is closed too while sending request to upstream, client: 192.168.27.105, server: , request: "GET /media/square_thumbnails_small/bb19b604fad41d6412825eb4919aa2671 HTTP/1.1", upstream: "http://172.29.40.5:8001/media/square_thumbnails_small/bb19b604fad41d6412825eb4919aa2671", host: "gingertom:40440", referrer: "http://gingertom:40440/"
192.168.27.105 - - [28/Mar/2023:19:19:20 +0000] "GET /media/square_thumbnails_small/bb19b604fad41d6412825eb4919aa2671 HTTP/1.1" 499 0 "http://gingertom:40440/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/111.0"
2023/03/28 19:19:20 [info] 29#29: *58528 epoll_wait() reported that client prematurely closed connection, so upstream connection is closed too while sending request to upstream, client: 192.168.27.105, server: , request: "GET /media/square_thumbnails/bb19b604fad41d6412825eb4919aa2671 HTTP/1.1", upstream: "http://172.29.40.5:8001/media/square_thumbnails/bb19b604fad41d6412825eb4919aa2671", host: "gingertom:40440", referrer: "http://gingertom:40440/"
192.168.27.105 - - [28/Mar/2023:19:19:20 +0000] "GET /media/square_thumbnails/bb19b604fad41d6412825eb4919aa2671 HTTP/1.1" 499 0 "http://gingertom:40440/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/111.0"
2023/03/28 19:19:20 [error] 29#29: *58551 open() "/protected_media/square_thumbnails/75455d6b624757f2ba43c0e99edb36731.webp" failed (13: Permission denied), client: 192.168.27.105, server: , request: "GET /media/square_thumbnails/75455d6b624757f2ba43c0e99edb36731 HTTP/1.1", upstream: "http://172.29.40.5:8001/media/square_thumbnails/75455d6b624757f2ba43c0e99edb36731", host: "gingertom:40440", referrer: "http://gingertom:40440/"
192.168.27.105 - - [28/Mar/2023:19:19:20 +0000] "GET /media/square_thumbnails/75455d6b624757f2ba43c0e99edb36731 HTTP/1.1" 403 153 "http://gingertom:40440/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/111.0"
2023/03/28 19:19:20 [error] 29#29: *58550 open() "/protected_media/square_thumbnails_small/75455d6b624757f2ba43c0e99edb36731.webp" failed (13: Permission denied), client: 192.168.27.105, server: , request: "GET /media/square_thumbnails_small/75455d6b624757f2ba43c0e99edb36731 HTTP/1.1", upstream: "http://172.29.40.5:8001/media/square_thumbnails_small/75455d6b624757f2ba43c0e99edb36731", host: "gingertom:40440", referrer: "http://gingertom:40440/"
192.168.27.105 - - [28/Mar/2023:19:19:20 +0000] "GET /media/square_thumbnails_small/75455d6b624757f2ba43c0e99edb36731 HTTP/1.1" 403 153 "http://gingertom:40440/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/111.0"
2023/03/28 19:19:20 [error] 29#29: *58555 open() "/protected_media/square_thumbnails/bb19b604fad41d6412825eb4919aa2671.webp" failed (13: Permission denied), client: 192.168.27.105, server: , request: "GET /media/square_thumbnails/bb19b604fad41d6412825eb4919aa2671 HTTP/1.1", upstream: "http://172.29.40.5:8001/media/square_thumbnails/bb19b604fad41d6412825eb4919aa2671", host: "gingertom:40440", referrer: "http://gingertom:40440/"
192.168.27.105 - - [28/Mar/2023:19:19:20 +0000] "GET /media/square_thumbnails/bb19b604fad41d6412825eb4919aa2671 HTTP/1.1" 403 153 "http://gingertom:40440/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/111.0"
2023/03/28 19:19:20 [error] 29#29: *58553 open() "/protected_media/square_thumbnails_small/bb19b604fad41d6412825eb4919aa2671.webp" failed (13: Permission denied), client: 192.168.27.105, server: , request: "GET /media/square_thumbnails_small/bb19b604fad41d6412825eb4919aa2671 HTTP/1.1", upstream: "http://172.29.40.5:8001/media/square_thumbnails_small/bb19b604fad41d6412825eb4919aa2671", host: "gingertom:40440", referrer: "http://gingertom:40440/"
192.168.27.105 - - [28/Mar/2023:19:19:20 +0000] "GET /media/square_thumbnails_small/bb19b604fad41d6412825eb4919aa2671 HTTP/1.1" 403 153 "http://gingertom:40440/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/111.0"
192.168.27.105 - - [28/Mar/2023:19:19:20 +0000] "GET /api/albums/date/35/?page=1 HTTP/1.1" 200 1106 "http://gingertom:40440/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/111.0"
2023/03/28 19:19:20 [info] 29#29: *58558 epoll_wait() reported that client prematurely closed connection, so upstream connection is closed too while sending request to upstream, client: 192.168.27.105, server: , request: "GET /media/square_thumbnails_small/326e8ae5f74e64e9d51cd5fa281a85fd1 HTTP/1.1", upstream: "http://172.29.40.5:8001/media/square_thumbnails_small/326e8ae5f74e64e9d51cd5fa281a85fd1", host: "gingertom:40440", referrer: "http://gingertom:40440/"
192.168.27.105 - - [28/Mar/2023:19:19:20 +0000] "GET /media/square_thumbnails_small/326e8ae5f74e64e9d51cd5fa281a85fd1 HTTP/1.1" 499 0 "http://gingertom:40440/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/111.0"
2023/03/28 19:19:20 [info] 29#29: *58551 epoll_wait() reported that client prematurely closed connection, so upstream connection is closed too while sending request to upstream, client: 192.168.27.105, server: , request: "GET /media/square_thumbnails/326e8ae5f74e64e9d51cd5fa281a85fd1 HTTP/1.1", upstream: "http://172.29.40.5:8001/media/square_thumbnails/326e8ae5f74e64e9d51cd5fa281a85fd1", host: "gingertom:40440", referrer: "http://gingertom:40440/"
192.168.27.105 - - [28/Mar/2023:19:19:20 +0000] "GET /media/square_thumbnails/326e8ae5f74e64e9d51cd5fa281a85fd1 HTTP/1.1" 499 0 "http://gingertom:40440/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/111.0"
2023/03/28 19:19:20 [info] 29#29: *58550 epoll_wait() reported that client prematurely closed connection, so upstream connection is closed too while connecting to upstream, client: 192.168.27.105, server: , request: "GET /media/square_thumbnails_small/7178ebafdbfb10a27ba189238dcfae4f1 HTTP/1.1", upstream: "http://172.29.40.5:8001/media/square_thumbnails_small/7178ebafdbfb10a27ba189238dcfae4f1", host: "gingertom:40440", referrer: "http://gingertom:40440/"
192.168.27.105 - - [28/Mar/2023:19:19:20 +0000] "GET /media/square_thumbnails_small/7178ebafdbfb10a27ba189238dcfae4f1 HTTP/1.1" 499 0 "http://gingertom:40440/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/111.0"
2023/03/28 19:19:20 [info] 29#29: *58555 epoll_wait() reported that client prematurely closed connection, so upstream connection is closed too while connecting to upstream, client: 192.168.27.105, server: , request: "GET /media/square_thumbnails/7178ebafdbfb10a27ba189238dcfae4f1 HTTP/1.1", upstream: "http://172.29.40.5:8001/media/square_thumbnails/7178ebafdbfb10a27ba189238dcfae4f1", host: "gingertom:40440", referrer: "http://gingertom:40440/"
192.168.27.105 - - [28/Mar/2023:19:19:20 +0000] "GET /media/square_thumbnails/7178ebafdbfb10a27ba189238dcfae4f1 HTTP/1.1" 499 0 "http://gingertom:40440/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/111.0"
192.168.27.105 - - [28/Mar/2023:19:19:20 +0000] "GET /media/square_thumbnails_small/326e8ae5f74e64e9d51cd5fa281a85fd1 HTTP/1.1" 403 153 "http://gingertom:40440/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/111.0"
192.168.27.105 - - [28/Mar/2023:19:19:20 +0000] "GET /media/square_thumbnails/326e8ae5f74e64e9d51cd5fa281a85fd1 HTTP/1.1" 403 153 "http://gingertom:40440/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/111.0"
2023/03/28 19:19:20 [error] 29#29: *58553 open() "/protected_media/square_thumbnails_small/326e8ae5f74e64e9d51cd5fa281a85fd1.webp" failed (13: Permission denied), client: 192.168.27.105, server: , request: "GET /media/square_thumbnails_small/326e8ae5f74e64e9d51cd5fa281a85fd1 HTTP/1.1", upstream: "http://172.29.40.5:8001/media/square_thumbnails_small/326e8ae5f74e64e9d51cd5fa281a85fd1", host: "gingertom:40440", referrer: "http://gingertom:40440/"
2023/03/28 19:19:20 [error] 29#29: *58565 open() "/protected_media/square_thumbnails/326e8ae5f74e64e9d51cd5fa281a85fd1.webp" failed (13: Permission denied), client: 192.168.27.105, server: , request: "GET /media/square_thumbnails/326e8ae5f74e64e9d51cd5fa281a85fd1 HTTP/1.1", upstream: "http://172.29.40.5:8001/media/square_thumbnails/326e8ae5f74e64e9d51cd5fa281a85fd1", host: "gingertom:40440", referrer: "http://gingertom:40440/"
2023/03/28 19:19:20 [error] 29#29: *58566 open() "/protected_media/square_thumbnails_small/7178ebafdbfb10a27ba189238dcfae4f1.webp" failed (13: Permission denied), client: 192.168.27.105, server: , request: "GET /media/square_thumbnails_small/7178ebafdbfb10a27ba189238dcfae4f1 HTTP/1.1", upstream: "http://172.29.40.5:8001/media/square_thumbnails_small/7178ebafdbfb10a27ba189238dcfae4f1", host: "gingertom:40440", referrer: "http://gingertom:40440/"
192.168.27.105 - - [28/Mar/2023:19:19:20 +0000] "GET /media/square_thumbnails_small/7178ebafdbfb10a27ba189238dcfae4f1 HTTP/1.1" 403 153 "http://gingertom:40440/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/111.0"
2023/03/28 19:19:20 [error] 29#29: *58568 open() "/protected_media/square_thumbnails/7178ebafdbfb10a27ba189238dcfae4f1.webp" failed (13: Permission denied), client: 192.168.27.105, server: , request: "GET /media/square_thumbnails/7178ebafdbfb10a27ba189238dcfae4f1 HTTP/1.1", upstream: "http://172.29.40.5:8001/media/square_thumbnails/7178ebafdbfb10a27ba189238dcfae4f1", host: "gingertom:40440", referrer: "http://gingertom:40440/"
192.168.27.105 - - [28/Mar/2023:19:19:20 +0000] "GET /media/square_thumbnails/7178ebafdbfb10a27ba189238dcfae4f1 HTTP/1.1" 403 153 "http://gingertom:40440/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/111.0"
2023/03/28 19:19:20 [error] 29#29: *58569 open() "/protected_media/square_thumbnails_small/263c11379a77e4329be22096bd1205511.webp" failed (13: Permission denied), client: 192.168.27.105, server: , request: "GET /media/square_thumbnails_small/263c11379a77e4329be22096bd1205511 HTTP/1.1", upstream: "http://172.29.40.5:8001/media/square_thumbnails_small/263c11379a77e4329be22096bd1205511", host: "gingertom:40440", referrer: "http://gingertom:40440/"
192.168.27.105 - - [28/Mar/2023:19:19:20 +0000] "GET /media/square_thumbnails_small/263c11379a77e4329be22096bd1205511 HTTP/1.1" 403 153 "http://gingertom:40440/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/111.0"
2023/03/28 19:19:20 [error] 29#29: *58571 open() "/protected_media/square_thumbnails/263c11379a77e4329be22096bd1205511.webp" failed (13: Permission denied), client: 192.168.27.105, server: , request: "GET /media/square_thumbnails/263c11379a77e4329be22096bd1205511 HTTP/1.1", upstream: "http://172.29.40.5:8001/media/square_thumbnails/263c11379a77e4329be22096bd1205511", host: "gingertom:40440", referrer: "http://gingertom:40440/"
192.168.27.105 - - [28/Mar/2023:19:19:20 +0000] "GET /media/square_thumbnails/263c11379a77e4329be22096bd1205511 HTTP/1.1" 403 153 "http://gingertom:40440/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/111.0"
192.168.27.105 - - [28/Mar/2023:19:19:21 +0000] "GET /api/albums/date/36/?page=1 HTTP/1.1" 200 438 "http://gingertom:40440/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/111.0"
2023/03/28 19:19:21 [error] 29#29: *58553 open() "/protected_media/square_thumbnails_small/d5d80a4000018e5f3f864b1111fd6ff01.webp" failed (13: Permission denied), client: 192.168.27.105, server: , request: "GET /media/square_thumbnails_small/d5d80a4000018e5f3f864b1111fd6ff01 HTTP/1.1", upstream: "http://172.29.40.5:8001/media/square_thumbnails_small/d5d80a4000018e5f3f864b1111fd6ff01", host: "gingertom:40440", referrer: "http://gingertom:40440/"
192.168.27.105 - - [28/Mar/2023:19:19:21 +0000] "GET /media/square_thumbnails_small/d5d80a4000018e5f3f864b1111fd6ff01 HTTP/1.1" 403 153 "http://gingertom:40440/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/111.0"
2023/03/28 19:19:21 [error] 29#29: *58565 open() "/protected_media/square_thumbnails/d5d80a4000018e5f3f864b1111fd6ff01.webp" failed (13: Permission denied), client: 192.168.27.105, server: , request: "GET /media/square_thumbnails/d5d80a4000018e5f3f864b1111fd6ff01 HTTP/1.1", upstream: "http://172.29.40.5:8001/media/square_thumbnails/d5d80a4000018e5f3f864b1111fd6ff01", host: "gingertom:40440", referrer: "http://gingertom:40440/"
192.168.27.105 - - [28/Mar/2023:19:19:21 +0000] "GET /media/square_thumbnails/d5d80a4000018e5f3f864b1111fd6ff01 HTTP/1.1" 403 153 "http://gingertom:40440/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/111.0"
192.168.27.105 - - [28/Mar/2023:19:19:21 +0000] "GET /api/albums/date/37/?page=1 HTTP/1.1" 200 438 "http://gingertom:40440/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/111.0"
2023/03/28 19:19:21 [info] 29#29: *58553 epoll_wait() reported that client prematurely closed connection, so upstream connection is closed too while sending request to upstream, client: 192.168.27.105, server: , request: "GET /media/square_thumbnails_small/69b0b687c2d900bcf9ee0e01fc36b4d41 HTTP/1.1", upstream: "http://172.29.40.5:8001/media/square_thumbnails_small/69b0b687c2d900bcf9ee0e01fc36b4d41", host: "gingertom:40440", referrer: "http://gingertom:40440/"
192.168.27.105 - - [28/Mar/2023:19:19:21 +0000] "GET /media/square_thumbnails_small/69b0b687c2d900bcf9ee0e01fc36b4d41 HTTP/1.1" 499 0 "http://gingertom:40440/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/111.0"
2023/03/28 19:19:21 [info] 29#29: *58566 epoll_wait() reported that client prematurely closed connection, so upstream connection is closed too while sending request to upstream, client: 192.168.27.105, server: , request: "GET /media/square_thumbnails/69b0b687c2d900bcf9ee0e01fc36b4d41 HTTP/1.1", upstream: "http://172.29.40.5:8001/media/square_thumbnails/69b0b687c2d900bcf9ee0e01fc36b4d41", host: "gingertom:40440", referrer: "http://gingertom:40440/"
192.168.27.105 - - [28/Mar/2023:19:19:21 +0000] "GET /media/square_thumbnails/69b0b687c2d900bcf9ee0e01fc36b4d41 HTTP/1.1" 499 0 "http://gingertom:40440/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/111.0"
2023/03/28 19:19:21 [error] 29#29: *58568 open() "/protected_media/square_thumbnails_small/69b0b687c2d900bcf9ee0e01fc36b4d41.webp" failed (13: Permission denied), client: 192.168.27.105, server: , request: "GET /media/square_thumbnails_small/69b0b687c2d900bcf9ee0e01fc36b4d41 HTTP/1.1", upstream: "http://172.29.40.5:8001/media/square_thumbnails_small/69b0b687c2d900bcf9ee0e01fc36b4d41", host: "gingertom:40440", referrer: "http://gingertom:40440/"
192.168.27.105 - - [28/Mar/2023:19:19:21 +0000] "GET /media/square_thumbnails_small/69b0b687c2d900bcf9ee0e01fc36b4d41 HTTP/1.1" 403 153 "http://gingertom:40440/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/111.0"
2023/03/28 19:19:21 [error] 29#29: *58569 open() "/protected_media/square_thumbnails/69b0b687c2d900bcf9ee0e01fc36b4d41.webp" failed (13: Permission denied), client: 192.168.27.105, server: , request: "GET /media/square_thumbnails/69b0b687c2d900bcf9ee0e01fc36b4d41 HTTP/1.1", upstream: "http://172.29.40.5:8001/media/square_thumbnails/69b0b687c2d900bcf9ee0e01fc36b4d41", host: "gingertom:40440", referrer: "http://gingertom:40440/"
192.168.27.105 - - [28/Mar/2023:19:19:21 +0000] "GET /media/square_thumbnails/69b0b687c2d900bcf9ee0e01fc36b4d41 HTTP/1.1" 403 153 "http://gingertom:40440/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/111.0"
192.168.27.105 - - [28/Mar/2023:19:19:22 +0000] "GET /api/rqavailable/ HTTP/1.1" 200 61 "http://gingertom:40440/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/111.0"
192.168.27.105 - - [28/Mar/2023:19:19:25 +0000] "GET /api/rqavailable/ HTTP/1.1" 200 61 "http://gingertom:40440/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/111.0"
banigithub-2 commented 1 year ago

It may be a question of special character in the path name of the file (é for instance). I encounter this issue.

Thanks for that! In the NAS it is /share/docker/librephotos/_data/protected_media Proxy thinks it is /protected_media

In the NAS, /share/docker is actually a symlink to /share/CACHEDEV1_DATA/docker - do you think that might be a problem?

loulou91 commented 1 year ago

I was speaking of picture path: /data/mon aimée/toi.jpg as an example ;-)

banigithub-2 commented 1 year ago

OK I think this is to do with access control lists on the NAS. Seems you also need to do something line a setfacl -R -M u:[UID]:rwx [protected_media|Pictures folder] where the UID is the ID on the NAS that your proxy containers nginx user appears as. For me, this worked: In proxy container console, get yourself to the folder where your pictures are stored; do:

touch file
chown nginx file

then on your NAS go to the same folder in its console, and ls -l that same file. Mine looks like this: -rw-rw---- 1 101 administrators 0 2023-04-01 22:12 file

The '101' is the magic number for me. I therefore ran:

setfacl -R -m u:101:rwx _data/protected_media
setfacl -R -m u:101:rwx Pictures

and as if by magic, all of the issues I raised stopped happening.

Is this something that should be added to the instructions where it already talks about chmod -R 777 [your pictures folder]?

derneuere commented 1 year ago

@banigithub-2 Yes, please! Would be great if you could either do a short write up or open a pull request and add it to the docs :)

jo-chemla commented 6 months ago

Jumping on this thread since I've got the same 403 (Forbidden) issue of batches of data/protected_media/... not loading. I've set the permissions with the chmod/setfacl commands, which made the photos that were already present and thumbnailed to load correctly on the web frontendload. However, new photos/thumbnails (scan was not complete) won't load, resulting in the same error. This seem to imply I need to re-execute the chmod/setfacl command on thumbnails periodically. Is that correct?

Is there any other workaround today which could avoid setting chmod 777 on the original photos - since it seems rather dangerous? Thanks!

Librephotos docker-docs states the following:

If you run into any permission issue, add -e FIXPERMISSIONS=true or change the permission to allow read/write/execute your photo folder to other users.

Complete errors: 2024/05/17 10:06:47 [error] 22#22: *5 open() "/protected_media/square_thumbnails/uuid.webp" failed (13: Permission denied), client: client-ip, server: , request: "GET /media/square_thumbnails/uuid HTTP/1.1", upstream: "http://container-ip:8001/media/square_thumbnails/uuid", host: "hostname:8022", referrer: "http://hostname:8022/"

derneuere commented 6 months ago

@jo-chemla Thumbnails should have the correct permissions, because LibrePhotos creates them. A user tried out a couple of possibilities and reported, that these permissions worked for him: https://docs.librephotos.com/docs/user-guide/faq#reason-2

Do you run something like Podman, instead of docker? I do not understand, why the permissions are changing 😅

jo-chemla commented 5 months ago

Thanks for getting back so quick. Indeed that was my thought - librephotos does create the thumbnail files within the directory so it should have access to it. Weird thing is that the files for which some hcmod/setfacl commands were executed are visible, while the newest ones added by librephotos return 403s.

I'm not using Podman but Portainer to manage my docker-compose stacks. Portainer is running as a given user, which is probably the user that did create the directories when setting-up the docker-compose file - since portainer/docker did create these directories according to my mapping of the volumes. I did try some chmod/setfacl which might be the reason the permissions are not set correctly? What would be the best way to reset everything so librephotos could access the thumbnails and original photos (without chmod 777 on the photos directory, I'd like to keep it read-only)? Thanks!

I did try the shared below commands in the /share/librephotos-data folder on the host, the one which is mapped to /data/ in the librephotos container, but this did not resolve the bug. 

find . -type d -exec chmod 755 {} +
find . -type f -exec chmod 644 {} +