[docs] Mention troubleshooting tips for 403 forbidden when self-hosting (#1849)

This commit is contained in:
Manav Rathi 2024-05-25 08:27:46 +05:30 committed by GitHub
commit f168ea9e1e
No known key found for this signature in database
GPG key ID: B5690EEEBB952194

View file

@ -78,3 +78,24 @@ To summarize:
Set the S3 bucket `endpoint` in `credentials.yaml` to a `yourserverip:3200` or Set the S3 bucket `endpoint` in `credentials.yaml` to a `yourserverip:3200` or
some such IP/hostname that accessible from both where you are running the Ente some such IP/hostname that accessible from both where you are running the Ente
clients (e.g. the mobile app) and also from within the Docker compose cluster. clients (e.g. the mobile app) and also from within the Docker compose cluster.
### 403 Forbidden
If museum (`2`) is able to make a network connection to your S3 bucket (`3`) but
uploads are still failing, it could be a credentials or permissions issue. A
telltale sign of this is that in the museum logs you can see `403 Forbidden`
errors about it not able to find the size of a file even though the
corresponding object exists in the S3 bucket.
To fix these, you should ensure the following:
1. The bucket CORS rules do not allow museum to access these objects.
> For viewing the uploaded files from the browser, you will need to
> currently set allowedOrigins to "*", and allow the "X-Auth-Token",
> "X-Client-Package" headers configuration too. [Here is an example of a
> working
> configuration](https://github.com/ente-io/ente/discussions/1764#discussioncomment-9478204).
2. The credentials are not being picked up (you might be setting the correct
creds, but not in the place where museum picks them from).