How to access admin when i use my domain?

[oanhcuongdo]

I use docker build. I can not access admin because django error domain not in allow_host. Please guide me fix it

[debanjum]

What is the domain that your Khoj server is running on?

You can set the KHOJ_DOMAIN environment variable to the domain your Khoj server is running on (in your docker-compose.yml or shell from where you start khoj via docker)

[oanhcuongdo]

hello, i config as you suggest: - POSTGRES_DB=postgres

• KHOJ_DOMAIN=mydomain.com
• POSTGRES_USER=postgres
• POSTGRES_PASSWORD=postgres but got error:

[sabaimran]

Hi @oanhcuongdo , are you using Safari? Which browser are you on? Can you try setting KHOJ_DEBUG=True in your docker-compose and loading from Firefox to see if that helps?

[uPagge]

I started docker-compose and got the same problem.

[uPagge]

And it really doesn't work in Safari, but it works in Google Chrome

[sabaimran]

Ah yeah, the admin page completely doesn't work in Safari. This is also in the documentation!. Safari is really finnicky with storing cookies, which are necessary for storing the authentication credentials.

Seeing as it's working in Chrome and the Safari error is expected, I'll close this ticket. Let me know if y'all run into additional errors.

[Jayddo]

I am also getting this very same error as in the screenshot, on a mac, on windows, using chromium, firefox and edge.

it wasn't loading the page at all, but by adding KHOJ_DOMAIN I got to a login screen at least. The error happens afterwards. I have tried private tabs as well.

Not sure what else to try. I am running it on linux, unraid, with the sample docker compose

[sabaimran]

@Jayddo

• Are you able to access the admin screen via localhost? Or does it fail for both localhost and with your custom domain? Do both specifically produce the CSRF verification error?
• Can you make sure that KHOJ_DEBUG is set to false, in case you're trying from your custom domain?

I'd tested this a while ago, but we'll go through some additional testing again + improve the documentation.

[Jayddo]

• not sure on the localhost part, as the docker sits on an unraid server, I can only access it from the unraid ip:42110, which also means the domain I added is actually an ip and not a domain per se, would that be an issue?
• tried setting it false, got the same error without detail

my case is a bit different I suppose due to installing it on unraid. I tried following the instructions and using the sample docker compose, changing volumes to what my actual volumes are.

update: by using the localsetupwithmanynumbers.myunraid.net and adding myunraid.net as the domain, I get the same error. It still loads the auth, however, without the khoj_domain variable it does not. I have tried both the actual subdomain.myunraid.net as well as just unraid.net, in both cases the error is the same, on multiple browsers.

[debanjum]

Is your custom domain behind https? Otherwise this maybe triggered to the CSRF token only being allowed for KHOJ_DOMAIN behind an https endpoint. See the CSRF_TRUSTED_ORIGINS being set in settings.py

[Jayddo]

Custom domain has a letsencrypt certificate, but it is also available on normal http. I see what you mean, but what can I do about that? Would it be possible to just... disable this admin login? Khoj sits behind a closed network I can only access via vpn anyway, in my specific case.

[Jayddo]

anything I can try or do @sabaimran ?

from the look of things it seems like ssl the unraid ssl doesn't work for that particular port/khoj, so I seem to have this issue because of the CSRF token only allowed behind the https endpoint, as surmised by debanjum.

I would rather disable the backend auth altogether if it's not an easy fix, but I'd be happy to try some more things.

While my setup is non-standard, unraid is very popular so it's probably not going to be uncommon as khoj gets more popular.