search

hoarder-app / hoarder

A self-hostable bookmark-everything app (links, notes and images) with AI-based automatic tagging and full text search
https://hoarder.app
GNU Affero General Public License v3.0
4.15k stars 140 forks source link

Docker image is missing the new Lets Encrypt intermediate root certificates #467

Open BertanAygun opened 2 days ago

BertanAygun commented 2 days ago

Opening a new issue, forking #407 since I initially thought it was the same but mine is different it looks like.

I need to set "NEXTAUTH_URL" to a reverse proxied full domain name using HSTS with a Lets Encrypt certificate, however this scenario fails because the app can't query https://hoarder..net/api/auth/providers. The certificate is valid in Edge/Chrome etc since I can visit the website just fine (but only credentials provider is enabled due to this error) and browser shows that certificate is valid.

In the container console, I used curl to try accessing that site and got the same error, after a bit reading it looks like this is caused by me having a newer LetsEncrypt certificate using an updated chain. The ISGR X1 root certificate is under /etc/ssl/certs but not the R10, R5 ones. Curl starts working if I download R10.pem and pass it along as an option.

MohamedBassem commented 1 day ago

@BertanAygun do you have a URL that I can test against?

kamtschatka commented 20 hours ago

If you can join discord and let me know your URL via PM, we can try it out and see if we can fix it. (or you open a PR yourself, If you have the knowledge to tackle that yourself)