haugene / docker-transmission-openvpn

Docker container running Transmission torrent client with WebUI over an OpenVPN tunnel
GNU General Public License v3.0
4.14k stars 1.21k forks source link

WebUI not working #2835

Closed MrAurel closed 6 months ago

MrAurel commented 6 months ago

Is there a pinned issue for this?

Is there an existing or similar issue/discussion for this?

Is there any comment in the documentation for this?

Is this related to a provider?

Are you using the latest release?

Have you tried using the dev branch latest?

Docker run config used

version: '3.3' services: transmission-openvpn: cap_add:

Current Behavior

I can't access to the WebUI on port 9091. I have no firewall restriction for that.

Expected Behavior

Access to the Webui

How have you tried to solve the problem?

I tried another container on this port, original transmission works when port 9091 is selected, so i think it's not the port. Change VPN settings but logs saids that it's ok so idk :/

Log output

Starting container with revision: 07f5a2b9aea5028c9bb75438c1552708e91dde71 TRANSMISSION_HOME is currently set to: /config/transmission-home Creating TUN device /dev/net/tun Using OpenVPN provider: NORDVPN Running with VPN_CONFIG_SOURCE auto Provider NORDVPN has a bundled setup script. Defaulting to internal config Executing setup script for NORDVPN /etc/openvpn/nordvpn/.. INFO: OVPN: Checking curl installation INFO: OVPN: DNS resolution ok INFO: OVPN: ok, configurations download site reachable INFO: OVPN: Removing existing configs in /etc/openvpn/nordvpn Checking NORDPVN API responses INFO: OVPN:Selecting the best server... INFO: OVPN: Searching for country : FR (74) WARNING: OVPN: empty or invalid NORDVPN_CATEGORY (value=). ignoring this parameter. Possible values are: legacy_double_vpn,legacy_onion_over_vpn,legacy_ultra_fast_tv,legacy_anti_ddos,legacy_dedicated_ip,legacy_standard,legacy_netflix_usa,legacy_p2p,legacy_obfuscated_servers,europe,the_americas,asia_pacific,africa_the_middle_east_and_india,anycast-dns,geo_dns,grafana,kapacitor,legacy_socks5_proxy,fastnetmon,. Please check https://haugene.github.io/docker-transmission-openvpn/provider-specific/#nordvpn INFO: OVPN:Searching for technology: openvpn_tcp INFO: OVPN: Best server : fr536.nordvpn.com, load: null Best server : fr536.nordvpn.com INFO: OVPN: Downloading config: fr536.nordvpn.com.ovpn INFO: OVPN: Downloading from: https://downloads.nordcdn.com/configs/files/ovpn_tcp/servers/fr536.nordvpn.com.tcp.ovpn OVPN: NORDVPN: selected: fr536.nordvpn.com, VPN_PROVIDER_HOME: /etc/openvpn/nordvpn Starting OpenVPN using config fr536.nordvpn.com.ovpn Modifying /etc/openvpn/nordvpn/fr536.nordvpn.com.ovpn for best behaviour in this container Modification: Point auth-user-pass option to the username/password file Modification: Change ca certificate path Modification: Change ping options Modification: Update/set resolv-retry to 15 seconds Modification: Change tls-crypt keyfile path Modification: Set output verbosity to 3 Modification: Remap SIGUSR1 signal to SIGTERM, avoid OpenVPN restart loop Modification: Updating status for config failure detection Setting OpenVPN credentials... adding route to local network 192.168.1.0/24 via 172.21.0.1 dev eth0 2024-05-07 15:20:29 OpenVPN 2.5.9 aarch64-unknown-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Sep 29 2023 2024-05-07 15:20:29 library versions: OpenSSL 3.0.2 15 Mar 2022, LZO 2.10 2024-05-07 15:20:29 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts 2024-05-07 15:20:29 NOTE: --fast-io is disabled since we are not using UDP 2024-05-07 15:20:29 Outgoing Control Channel Authentication: Using 512 bit message hash 'SHA512' for HMAC authentication 2024-05-07 15:20:29 Incoming Control Channel Authentication: Using 512 bit message hash 'SHA512' for HMAC authentication 2024-05-07 15:20:29 TCP/UDP: Preserving recently used remote address: [AF_INET]217.138.207.139:443 2024-05-07 15:20:29 Socket Buffers: R=[131072->131072] S=[16384->16384] 2024-05-07 15:20:29 Attempting to establish TCP connection with [AF_INET]217.138.207.139:443 [nonblock] 2024-05-07 15:20:29 TCP connection established with [AF_INET]217.138.207.139:443 2024-05-07 15:20:29 TCP_CLIENT link local: (not bound) 2024-05-07 15:20:29 TCP_CLIENT link remote: [AF_INET]217.138.207.139:443 2024-05-07 15:20:29 TLS: Initial packet from [AF_INET]217.138.207.139:443, sid=dd25ef1d 4940e7d0 2024-05-07 15:20:29 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this 2024-05-07 15:20:29 VERIFY OK: depth=2, C=PA, O=NordVPN, CN=NordVPN Root CA 2024-05-07 15:20:29 VERIFY OK: depth=1, O=NordVPN, CN=NordVPN CA9 2024-05-07 15:20:29 VERIFY KU OK 2024-05-07 15:20:29 Validating certificate extended key usage 2024-05-07 15:20:29 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication 2024-05-07 15:20:29 VERIFY EKU OK 2024-05-07 15:20:29 VERIFY X509NAME OK: CN=fr536.nordvpn.com 2024-05-07 15:20:29 VERIFY OK: depth=0, CN=fr536.nordvpn.com 2024-05-07 15:20:29 Control Channel: TLSv1.3, cipher TLSv1.3 TLS_AES_256_GCM_SHA384, peer certificate: 4096 bit RSA, signature: RSA-SHA512 2024-05-07 15:20:29 [fr536.nordvpn.com] Peer Connection Initiated with [AF_INET]217.138.207.139:443 2024-05-07 15:20:30 SENT CONTROL [fr536.nordvpn.com]: 'PUSH_REQUEST' (status=1) 2024-05-07 15:20:30 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1,dhcp-option DNS 103.86.96.100,dhcp-option DNS 103.86.99.100,explicit-exit-notify,comp-lzo no,route-gateway 10.100.0.1,topology subnet,ping 60,ping-restart 180,ifconfig 10.100.0.2 255.255.255.0,peer-id 0,cipher AES-256-CBC' 2024-05-07 15:20:30 OPTIONS IMPORT: timers and/or timeouts modified 2024-05-07 15:20:30 OPTIONS IMPORT: --explicit-exit-notify can only be used with --proto udp 2024-05-07 15:20:30 OPTIONS IMPORT: compression parms modified 2024-05-07 15:20:30 OPTIONS IMPORT: --ifconfig/up options modified 2024-05-07 15:20:30 OPTIONS IMPORT: route options modified 2024-05-07 15:20:30 OPTIONS IMPORT: route-related options modified 2024-05-07 15:20:30 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified 2024-05-07 15:20:30 OPTIONS IMPORT: peer-id set 2024-05-07 15:20:30 OPTIONS IMPORT: adjusting link_mtu to 1659 2024-05-07 15:20:30 OPTIONS IMPORT: data channel crypto options modified 2024-05-07 15:20:30 Outgoing Data Channel: Cipher 'AES-256-CBC' initialized with 256 bit key 2024-05-07 15:20:30 Outgoing Data Channel: Using 512 bit message hash 'SHA512' for HMAC authentication 2024-05-07 15:20:30 Incoming Data Channel: Cipher 'AES-256-CBC' initialized with 256 bit key 2024-05-07 15:20:30 Incoming Data Channel: Using 512 bit message hash 'SHA512' for HMAC authentication 2024-05-07 15:20:30 net_route_v4_best_gw query: dst 0.0.0.0 2024-05-07 15:20:30 net_route_v4_best_gw result: via 172.21.0.1 dev eth0 2024-05-07 15:20:30 ROUTE_GATEWAY 172.21.0.1/255.255.0.0 IFACE=eth0 HWADDR=02:42:ac:15:00:02 2024-05-07 15:20:30 TUN/TAP device tun0 opened 2024-05-07 15:20:30 net_iface_mtu_set: mtu 1500 for tun0 2024-05-07 15:20:30 net_iface_up: set tun0 up 2024-05-07 15:20:30 net_addr_v4_add: 10.100.0.2/24 dev tun0 2024-05-07 15:20:30 net_route_v4_add: 217.138.207.139/32 via 172.21.0.1 dev [NULL] table 0 metric -1 2024-05-07 15:20:30 net_route_v4_add: 0.0.0.0/1 via 10.100.0.1 dev [NULL] table 0 metric -1 2024-05-07 15:20:30 net_route_v4_add: 128.0.0.0/1 via 10.100.0.1 dev [NULL] table 0 metric -1 Up script executed with device=tun0 ifconfig_local=10.100.0.2 Updating TRANSMISSION_BIND_ADDRESS_IPV4 to the ip of tun0 : 10.100.0.2

Transmission will run as

User name: root User uid: 0 User gid: 0

Updating Transmission settings.json with values from env variables Attempting to use existing settings.json for Transmission Successfully used existing settings.json /config/transmission-home/settings.json Overriding bind-address-ipv4 because TRANSMISSION_BIND_ADDRESS_IPV4 is set to 10.100.0.2 Overriding download-dir because TRANSMISSION_DOWNLOAD_DIR is set to /data/completed Overriding incomplete-dir because TRANSMISSION_INCOMPLETE_DIR is set to /data/incomplete Overriding rpc-password because TRANSMISSION_RPC_PASSWORD is set to [REDACTED] Overriding rpc-port because TRANSMISSION_RPC_PORT is set to 9091 Overriding rpc-username because TRANSMISSION_RPC_USERNAME is set to Overriding watch-dir because TRANSMISSION_WATCH_DIR is set to /data/watch sed'ing True to true STARTING TRANSMISSION Transmission startup script complete. 2024-05-07 15:20:31 Initialization Sequence Completed

HW/SW Environment

- OS:macOS14.4.1
- Docker:26.0.0

Anything else?

No response

pkishino commented 6 months ago

Known issue on macOS, only solution for now is to downgrade

2723