NginxProxyManager / nginx-proxy-manager

Docker container for managing Nginx proxy hosts with a simple, powerful interface
https://nginxproxymanager.com
MIT License
23.47k stars 2.72k forks source link

How to reset password for web GUI #230

Open ertemmstein opened 5 years ago

ertemmstein commented 5 years ago

Hi,

I forgot my password of Web GUI but i can connect container. How can i reset password/username?

jc21 commented 5 years ago

Here's an obscure way to do this:

  1. Connect to the database
  2. Run: UPDATE user SET is_deleted=1;
  3. Restart nginx proxy manager, this will create a new Admin user with the following credentials:
    • admin@example.com
    • Password: changeme
  4. Run: UPDATE user SET is_deleted=0;
  5. Log in as the new user and reset your other user's password
  6. Log in as your main user, delete the new example user

If you are inexperienced with docker and MySQL, this comment provides more detailed instructions on how to perform these steps.

ertemmstein commented 5 years ago

Thank you! It is done

theDwiz01 commented 5 years ago

Paid a friend to set this up via Hyper-V Manager VM. Been working for months. Had to restore my OS to previous image. After re-image no reverse proxies setup on this server work from the 3 day old image(502 bad gateway error given).

All reverse proxies setup on other server on the network work fine. On top of that I somehow have wrong web login password saved to Dashlane and can't access GUI. How do I reset my password?? Once I can login I can try to troubleshoot the "502 Bad Gateway" more for the half of them that don't load...

jc21 commented 5 years ago

I think the docker logs for nginx proxy manager might be helpful, if you've lost access to your previous account then the restored image might not be using a pre-existing database and created a new one. It's a hard one to debug through just these comments.

You can follow the steps above to reset your password, assuming the default admin@example.com:changeme doesn't work.

jc21 commented 5 years ago

I assume you'd need to access your VM and connect to the database from there. As we don't know what your friend did to set up the vm we can't help, and supporting docker hosts is not in our scope.

mcfrojd commented 4 years ago

Here's an obscure way to do this:

  1. Connect to the database
  2. Run: UPDATE user SET is_deleted=1;
  3. Restart nginx proxy manager, this will create a new Admin user with the following credentials:
  1. Run: UPDATE user SET is_deleted=0;
  2. Log in as the new user and reset your other user's password
  3. Log in as your main user, delete the new example user

Im running your docker-compose.yaml way, but how do i access the mariadb from cli to reset the default user again?

I try to run: sudo docker exec -it 5dd2bb6cb8cc bash

But the get: OCI runtime exec failed: exec failed: container_linux.go:349: starting container process caused "exec: \"bash\": executable file not found in $PATH": unknown

lieven121 commented 4 years ago

Im running your docker-compose.yaml way, but how do i access the mariadb from cli to reset the default user again?

I try to run: sudo docker exec -it 5dd2bb6cb8cc bash

But the get: OCI runtime exec failed: exec failed: container_linux.go:349: starting container process caused "exec: \"bash\": executable file not found in $PATH": unknown

1: the error says it doesn't find bash (some containers only have 'sh' or 'ash') Note: I looked trough his DockerFile for his mariaDB and it uses alpine so 'sh' or 'ash'. sudo docker exec -it [id or name] sh

2: you also can login to mysql directly using : sudo docker exec -it [id or name] mysql -u [username] -p'

PCbIX commented 4 years ago

For me works that: sudo docker exec -it [database container id or name] sh mysql connect npm UPDATE user SET is_deleted=1; sudo docker restart [nmp container id or name] (start second ssh connection to do that) UPDATE user SET is_deleted=0; Login with: Login: admin@example.com Password: changeme

TsekNet commented 3 years ago

Should this be added to the docs as an alternative method for resetting an account password? This just prevented me from being locked out, where the instructions currently linked on the npm website did not work.

morg-mov commented 3 years ago

I'm unable to connect to the MySQL Database. Whenever I run the set of commands described above by @PCbIX, it just says "Command not Found" when I attempt to run "mysql".

Edit: I figured it out, but now I have a new problem, when I attempt to execute UPDATE user SET is_deleted=1;, It outputs ERROR 1046 (3D000): No database selected.

talesam commented 3 years ago

2. UPDATE user SET is_deleted=1;

Hello, could you be more specific?

docker exec -it nginxproxymanager_db_1 sh
mysql -u npm
MariaDB [(none)]> show databases;
+--------------------+
| Database           |
+--------------------+
| information_schema |
+--------------------+
1 row in set (0.002 sec)
MariaDB [(none)]> UPDATE user SET is_deleted=1;
ERROR 1046 (3D000): No database selected
USE information_schema

My DB: DB_MYSQL_NAME: "npm"

something is wrong, the npm bank was supposed to appear, right?

I have the password saved on google, and I went to connect said it is invalid, I did not change the password.

imloic commented 3 years ago

Hey i have same problem. do you find a solution plz ?

talesam commented 3 years ago

It seems that some people do not have the patience to explain or assume that everyone already knows how to do it, but in the end I found out and documented it.

Step 1

Run these commands on the machine running the docker container containing the database:

docker exec -it nginxproxymanager_db_1 sh
mysql -u root -p

You will have to enter the root password of your database. You have set it in your docker-compose file through the MYSQL_ROOT_PASSWORD variable. Then continue entering the following commands:

USE npm;
UPDATE user SET is_deleted=1;
quit
exit

Step 2

If your NPM container has been running, restart it. If it has not been running, start it now.

Step 3

Access your NPM in the browser and log in with this data: login: admin@example.com pass: changeme

Step 4

You have now created an admin user you can login with. You can now either just use this user, or you can re-enable the old account and use the new account to change the password of the old one. To re-enable it, once again execute the following commands:

docker exec -it nginxproxymanager_db_1 sh
mysql -u root -p

Enter the root password again, as in step 1.

USE npm;
UPDATE user SET is_deleted=0;
quit
exit
imloic commented 3 years ago

thnaks bro you save my day

talesam commented 3 years ago

I improved it to make it easier to understand ;-)

morg-mov commented 3 years ago

Hi. Sorry, I forgot to respond to this. I just decided to uninstall and reinstall it because I thought my install was broken. (turns out I was just doing something wrong.) Thanks for the help though. I'll be sure to keep this in mind for when I will inevitably forget my password again lol.

leon1995 commented 3 years ago

Hi,

I followed the instructions, however after setting is_deleted back to is_deleted=0 and restarting the containers, I wasn't able to login because of an incorrect password. How can I fix this?

EDIT: after the 4th try its working now

leon1995 commented 3 years ago

Today I had to do it again....

chaptergy commented 3 years ago

For those not wanting a new admin account, but instead to just set the password of a specific account you can do the following:

Connect to the database as before and go into the table named auth and update the secret column where the user_id is the user id you want. (You can see the users in the users table, and see the id associated with an email address.

Change the secret to

$2b$13$C9mJYK7Gf7sVgCCYw84HhOvOIpnyhkdGqwIp0PPj/s9.q0bxkoMZe

This will result in the password being changeme.

For those who are not able to log in with your new password after logging out, maybe you are experiencing issue https://github.com/jc21/nginx-proxy-manager/issues/1120. Change your password to a password which does not contain a #-symbol until this is fixed.

janmaroto commented 3 years ago

If you are using the jlesage image (jlesage/nginx-proxy-manager) and not the official docker image, you can also do it like this: Get into the container: docker exec -it nginx-proxy-manager sh And now use the dedicarted program to reset it: /opt/nginx-proxy-manager/bin/reset-password name@example.com newpassword

Maybe this is a new feature at the time of writing this, idk. Hope it helps to the other people searching for this issue. I found this program of pure luck while browsing the container in search of MySQL since it wasn't in the path.

rourke750 commented 3 years ago

Following up on this. My account was deleted out of no where and the default came back. Weird thing is all data is now missing no proxies, redirects, anything but the logs are still reporting proxy requests working and are still trying to update my expired ssl certificates. Any idea?

chaptergy commented 3 years ago

@rourke750 This has nothing to do with resetting the password. It sounds like somehow your database was wiped, so the only data left is the generated nginx config files. That is why the hosts keep working and the ssl certificates as well, but npms knowlege about these hosts and certificates has been deleted.

itsKV commented 3 years ago

/opt/nginx-proxy-manager/bin/reset-password name@example.com newpassword

I am getting following error white entering above command..

sh: 1: /opt/nginx-proxy-manager/bin/reset-password: not found

chaptergy commented 3 years ago

@itsKV then you don't have the jlesage image, but the official one. Reset it like described in this comment instead.

itsKV commented 3 years ago

For me works that: sudo docker exec -it [database container id or name] sh mysql connect npm UPDATE user SET is_deleted=1; sudo docker restart [nmp container id or name] (start second ssh connection to do that) UPDATE user SET is_deleted=0; Login with: Login: admin@example.com Password: changeme

In the step 1, for second command mysql is giving error sh: 1: mysql: not found as I am not using mysql. My setup's docker-compose is as follows...

version: "3" services: app: image: 'jc21/nginx-proxy-manager:latest' restart: unless-stopped ports:

These ports are in format :

  - '80:80' # Public HTTP Port
  - '443:443' # Public HTTPS Port
  - '81:81' # Admin Web Port
  # Add any other Stream port you want to expose
  # - '21:21' # FTP
# Uncomment the next line if you uncomment anything in the section
# environment:
  # Uncomment this if you want to change the location of
  # the SQLite DB file within the container
  # DB_SQLITE_FILE: "/data/database.sqlite"
  # Uncomment this if IPv6 is not enabled on your host
  # DISABLE_IPV6: 'true'

volumes:
  - ./data:/data
  - ./letsencrypt:/etc/letsencrypt

How can I reset the web ui password?

chaptergy commented 3 years ago

See https://github.com/jc21/nginx-proxy-manager/discussions/1634

itsKV commented 3 years ago

See #1634

This worked like a charm.. 👍

uniquegch commented 2 years ago

I had to do this also and in case you do not find the password for the db and run portainer, just click the container for the nginx database (in my case it is nginx_d) and you will find the login information including the db password. when you connected to the db you can also run SELECT FROM user; and it will reveal the username. here are my steps: sudo docker exec -it nginx_db_1 sh mysql -u root -p enter the db password USE npm; show tables; SELECT FROM user; you will see the username and the e-mail address. this might be enough to trigger your memory for what password you have set. If not you can continue with the steps,

UPDATE user SET is_disabled=1; quit exit

restart the nginx db AND the nginx app

login with the admin@example.com and changeme password. change the username information and the password

and run

sudo docker exec -it nginx_db_1 sh mysql -u root -p enter the db password USE npm; UPDATE user SET is_disabled=0; quit exit

nvhurulenewvisionge commented 2 years ago

If you are using the jlesage image (jlesage/nginx-proxy-manager) and not the official docker image, you can also do it like this: Get into the container: docker exec -it nginx-proxy-manager sh And now use the dedicarted program to reset it: /opt/nginx-proxy-manager/bin/reset-password name@example.com newpassword

Maybe this is a new feature at the time of writing this, idk. Hope it helps to the other people searching for this issue. I found this program of pure luck while browsing the container in search of MySQL since it wasn't in the path.

this works with Docker' Thanks

artemptushkin commented 2 years ago

Referring to this https://github.com/NginxProxyManager/nginx-proxy-manager/issues/230#issuecomment-550565639 my password reset flow looked like this today:

  1. sudo docker ps -> search mariadb and take container id
  2. sudo docker exec -it <container-id> sh
  3. mysql -u root -p
  4. use nginxproxymanager; (this step is missing everywhere, you should use a table)
  5. UPDATE user SET is_deleted=1;
  6. restart Nginx click on the button through addons UI or restart the container
  7. login with default creds: admin@example.com / changeme
  8. In MySQL terminal: UPDATE user SET is_deleted=0;
scyto commented 2 years ago

@artemptushkin thanks this helped me a lot. some additional notes for others as there seem to be multiple installation types, this is for docker using the canonical compose for both db and npm and many variants.

ekkyzainularifin commented 1 year ago

Here's an simple way to do this:

  1. docker exec -it <container name> mysql -u root -p
  2. use npm;
  3. update auth set secret = '$2a$12$HQahaE/VRe7CDffHOmIPR.9StcFZpciw3P9KmbMR7rRTLIsVgvAiG' (password)
mikromcz commented 1 year ago

For those not wanting a new admin account, but instead to just set the password of a specific account you can do the following:

Connect to the database as before and go into the table named auth and update the secret column where the user_id is the user id you want. (You can see the users in the users table, and see the id associated with an email address. Change the secret to

$2b$13$C9mJYK7Gf7sVgCCYw84HhOvOIpnyhkdGqwIp0PPj/s9.q0bxkoMZe

This will result in the password being changeme.

For those who are not able to log in with your new password after logging out, maybe you are experiencing issue #1120. Change your password to a password which does not contain a #-symbol until this is fixed.

best answer. I just copy sqlite db to my windows machine, and use SQLite editor to do it and then copy it back (and change owner/group back to root)

robetus commented 1 year ago

Getting:ERROR 1146 (42S02): Table 'npm.user' doesn't exist when I run UPDATE user SET is_deleted=1; Any ideas? Also get:

MariaDB [npm]> UPDATE user SET is_deleted=1;
ERROR 1036 (HY000): Table 'user' is read only
typoworx-de commented 1 year ago

This somehow sucks after trying to reset password as given above using sqlite it's giving me this error after being logged in: Cannot read properties of null (reading 'avatar')

Somehow there's something totally screwed.

Even after doing this:

delete from sqlite_sequence;
delete from user;
delete from auth;
delete from user_permission;

And re-initialising with default login (with user-id 1) to reset admin with new credentials, it's still stuck :-/

update finally got it working by doing this: update proxy_host set owner_user_id=1 where 1;

JSouthGB commented 1 year ago

Here's an simple way to do this:

3. `update auth set secret = '$2a$12$HQahaE/VRe7CDffHOmIPR.9StcFZpciw3P9KmbMR7rRTLIsVgvAiG'` (password)

This is the winner for me. This will change ALL users' passwords to password. One minor correction:

update auth set secret = '$2a$12$HQahaE/VRe7CDffHOmIPR.9StcFZpciw3P9KmbMR7rRTLIsVgvAiG';

I'm using the jc21/mariadb-aria container and needed the trailing semi-colon.

And I'll add a note.

I had an Invalid Password error a couple months ago and used the UPDATE user SET is_deleted=1; method, it worked. Tonight I had the Invalid Password error again, and it didn't work. Using the quoted command above got me back in without having to restart either the app or db containers. However, clicking on Proxy Hosts returned an Owner is null error. It turns out, using the is_deleted=1 method previously, created my same user id twice, one with id=1 and another with id=2. Digging around, I found in the proxy_host table entries created by both id=1 and id=2. So I looked up some SQL commands and deleted both the id=2 and the default id=3 admin account leaving me with only my id=1 login. I then ran the below command and all is well again.

UPDATE proxy_host SET owner_user_id=1;

I use bind volumes for all of my docker containers to easily back them up, restore, and move them around as I want or need (I'm constantly changing/rebuilding). I end up with password issues due to the way NPM handles the db file permissions. (Not blaming the NPM author(s), just additional information)

github-actions[bot] commented 8 months ago

Issue is now considered stale. If you want to keep it open, please comment :+1:

nenchi commented 1 month ago

For those who have official repo with SQLite:

Find your user: SELECT id, name, email FROM user;

OUTPUT: 1|Admin|some@email.com 2|User|some@email.com

Updating Password with "new_password" for user Admin[1], if you need to update for User[2], then use ID number 2 (WHERE user_id = 2;): UPDATE auth SET secret = '$2b$12$ExC8EX3htFBpXtbO4DXp.eAZ1CtJbGlDhRhpVV1hHcWjV7cprebZi' WHERE user_id = 1;

To check if Hash was changed, use this command (Change ID number at end for your user): SELECT id, user_id, secret FROM auth WHERE user_id = 1;

Nightwalker83 commented 1 day ago

For those not wanting a new admin account, but instead to just set the password of a specific account you can do the following:

Connect to the database as before and go into the table named auth and update the secret column where the user_id is the user id you want. (You can see the users in the users table, and see the id associated with an email address. Change the secret to

$2b$13$C9mJYK7Gf7sVgCCYw84HhOvOIpnyhkdGqwIp0PPj/s9.q0bxkoMZe

This will result in the password being changeme.

For those who are not able to log in with your new password after logging out, maybe you are experiencing issue #1120. Change your password to a password which does not contain a #-symbol until this is fixed.

best answer. I just copy sqlite db to my windows machine, and use SQLite editor to do it and then copy it back (and change owner/group back to root)

Thanks! You are a life saver. Thought I was going to have to struggle with the browser and getting it to except certificates.