Synology mobile apps won't connect anymore after setting up Traefik reverse proxy

Traefik Traefik v2
1

Hi,

I recently switched from Nginx Proxy Manager to Traefikv2.
It's installed on my Ubuntu Server through docker.

I got most of my services running as before, but I can't connect my Synology mobile apps (DS File/Synology Drive) to my Synology Diskstation anymore.
It used to work out of the box on NPM, but I think I'm missing something here.
Before using Traefik I could just connect through the apps by e.g.
nas.mydomain.com:443, but that doesn't work anymore.

Through the webbrowser I can connect just fine, only the apps won't connect.

Could someone maybe give me some help?

Thanks a lot!

Traefik config.yml:

routers:
  ds412:
      entryPoints:
        - "https"
      rule: "Host(`nas.local.mydomain.com`,`nas.mydomain.com`)"
      service: ds412
      middlewares:
        - default-headers
        - authelia
      tls: {}
  synology-drive:
      entryPoints:
        - "https"
      rule: "Host(`drive.local.mydomain.com`,`drive.mydomain.com`)"
      middlewares:
        - default-headers
        - authelia
      tls: {}
      service: synology-drive
  synology-fs:
    entryPoints:
      - "https"
    rule: "Host(`fs.local.mydomain.com`,`fs.mydomain.com`)"
    service: synology-fs
    middlewares:
      - default-headers
      - authelia
    tls: {}

services:
  ds412:
    loadBalancer:
      passHostHeader: true
        servers:
          - url: "http://10.20.15.101:8015"
  synology-drive:
    loadBalancer:
      passHostHeader: true
      servers:
        - url: "http://10.20.15.101:8045"
  synology-fs:
    loadBalancer:
      passHostHeader: true
      servers:
        - url: "http://10.20.15.101:8048"

middlewares:
  authelia:
    forwardAuth:
      address: "http://authelia:9091/api/verify?rd=https://auth.mydomain.com"
    authelia@docker:

  default-headers:
    headers:
      frameDeny: true
      sslRedirect: true
      browserXssFilter: true
      contentTypeNosniff: true
      forceSTSHeader: true
      stsIncludeSubdomains: true
      stsPreload: true
      stsSeconds: 15552000
      customFrameOptionsValue: SAMEORIGIN
      customRequestHeaders:
        X-Forwarded-Proto: https
2

Hey @Saidou I stumbled about this issue. Did you found a solution for this?

3

Routers, middlewares and services (and custom TLS files) need to be placed in a dynamic config file, which is read with providers.file in static config.

4

Could you elaborate what happens there? Because for my self I don't use Treafik as reverese proxy but a different one. I have the same problem like in this issue with everything working fine, execpt the mobile Drive app.

5

Sorry, this is a Traefik forum :laughing:

6

Yeah sure. I'm just curious what you would configure in Traefik to make it work. :slight_smile:

7

As stated above, you need a static config (entrypoints, certresolver, providers) and a dynamic config (routers, middlewares, services, custom TLS) for this to work.

Check simple Traefik example. command is static config, can also be placed in traefik.yml.

8

Hi @lenderom ,

I already forgot I posted this question.

There was nothing wrong with my Traefik static/dynamic config.
As I put all my domains behind Authelia for authentication, I had to allow the api call for the synology apps. So the issue wasn't Traefik related

I thought synolgy api url was e.g. https://drive.domain.com/api/...
But they actually use e.g. https://drive.domain.com/webapi/...

So under "access_control" I added this line to my Authelia configuration.yml file:

access_control:
  default_policy: deny
  rules:
    - domain:
        - "drive.domain.com"
      resources:
        - "^/webapi/.*"
      policy: bypass

NOTE:

For the DS Files app to work you have to append :443 to the url when setting up the app (so e.g. https://fs.domain.com:443)

1 Like
9

This topic was automatically closed 3 days after the last reply. New replies are no longer allowed.