Hi George,

that's my guess, too. But I don't have a glue what it may be.

For anubis we are using 1.25.0


And here is the apache.conf (stripped off unrelevant stuff)

# the vhost proxying to anubis
    <VirtualHost *:443>
        ServerAdmin ...
        ServerName ...

        Protocols h2 http/1.1

        SSLEngine on
        SSLProxyEngine on
        SSLCertificateFile ...
        SSLCertificateKeyFile ...

        # needed for anubis
        RequestHeader set "X-Real-Ip" expr=%{REMOTE_ADDR}
        RequestHeader set X-Forwarded-Proto "https"
        RequestHeader set "X-Http-Version" "%{SERVER_PROTOCOL}s"

        ProxyPreserveHost On
        ProxyRequests Off
        ProxyVia Off

        # proxy (nearly) everything to anubis
        ProxyPass /status !
        ProxyPass / http://localhost:8923/
        ProxyPassReverse / http://localhost:8923/
    </VirtualHost>

# the vhost for anubis target
<VirtualHost *:3027>
    Protocols h2 http/1.1
    ServerAdmin ...
    ServerName ...

    UseCanonicalName On

    LogLevel info
    ErrorLog ...
    CustomLog ...

Header always set Strict-Transport-Security: "max-age=31536000; includeSubDomains" Header add Content-Security-Policy "default-src 'self'; script-src 'self'; style-src 'self' 'unsafe-inline'; img-src 'self' data: w3.org/2000/svg"
    Header always set X-Frame-Options "SAMEORIGIN"
    Header always set X-Xss-Protection "1; mode=block"
    Header always set X-Content-Type-Options: "nosniff"
    Header always set Referrer-Policy: "strict-origin-when-cross-origin"
Header always set Permissions-Policy: "camera=(), fullscreen=(self), geolocation=(self), gyroscope=(), magnetometer=(), microphone=(), midi=(self), payment=(), sync-xhr=(self)"
    Header always unset X-Powered-By
    Header unset X-Powered-By
    Header always set Server "Openscience"

    RewriteEngine On
    # enable old (DS6) pathes
    RewriteRule "^/oai/(.*)" "/server/oai/$1" [PT]
    RewriteRule "^/webjars/(.*)" "/server/webjars/$1" [PT]

    ProxyPreserveHost On
    ProxyIOBufferSize 65536

    # Backend proxy
    ProxyPass /server ajp://localhost:8009/server secret=...
    ProxyPassReverse /server ajp://localhost:8009/server

    # Frontend proxy
    # Proxy all HTTPS requests from Apache to PM2 on port 4000
    ProxyPass / http://localhost:4000/
    ProxyPassReverse / http://localhost:4000/
</VirtualHost>


Maybe you see anything problematic.





On 2026-03-24 14:57, george veranis wrote:
I think you missed something in the configuration of apache
Which version of Anubis you use ?

George Veranis
Dataly Tech
Tel: +30 6936 35 14 03
Email: [email protected] <mailto:[email protected]>
SkypeId: gveranis
*
Disclaimer:*The information contained in this e-mail is intended only for the use of the individuals or entities to which it is addressed and may contain information that is privileged and confidential, the disclosure of which is prohibited by law. If the reader of this message is not the intended recipient, you are hereby notified that any dissemination, distribution or copying of this communication is strictly prohibited. If you have received this e-mail in error, please notify us immediately on [email protected] <mailto:[email protected]> or send an email to [email protected] <mailto:[email protected]>and delete this e-mail from your system. Company with distinctive title Dataly Tech Single Member P.C., cannot accept any responsibility for the accuracy or completeness of this message and does not accept any liability for any errors or omissions in the context of this message as it has been transmitted over a public network. Internet communications cannot be guaranteed to be secure or error free as information could be intercepted, corrupted, or contain viruses. Attachments to this e-mail are checked for viruses; however, we do not accept any liability for any damage sustained by viruses and therefore you are kindly requested to check for viruses upon receipt.


Στις Τρί 24 Μαρ 2026 στις 3:55 μμ ο χρήστης Armin Wenz <[email protected] mainz.de <mailto:[email protected]>> έγραψε:

    Hi all,

    I am testing DSpace 9.2 (no CRIS) with anubis in front of it. I  use
    apache as proxy.

    When running the back- and frontend without anubis in front everything
    works fine.

    When I put anubis between the proxy and the frontend I encounter a
    different behaviour when running the frontend in development or in
    production mode.

    For development mode I build the frontend via 'npm run build:dev' and
    start it via
    NODE_ENV="development" node ./dist/server/main.js

    In this case everything is working as expected. I got no relevant
    errors
    (apart from 404 for google-analytics we don't use). When clicking on
    the
    Login Button I see the modal showing the options for password or OIDC
    Login. I can login as expected and everything's fine.

    When I build the frontend via 'npm run build:prod' and start it via
    NODE_ENV="production" node ./dist/server/main.js
    at first everything seems to be fine. The frontend is loading, I can
    browse just fine.
    In the terminal I got errors saying

    ERROR Error: undefined doesn't contain the link sites
          at /opt/local/openscience-ui/dist/server/main.js:1:1622049
          at /opt/local/openscience-ui/dist/server/main.js:1:4685635
          at OperatorSubscriber2._this._next
    (/opt/local/openscience-ui/dist/server/main.js:1:309020)
          at OperatorSubscriber2.Subscriber2.next
    (/opt/local/openscience-ui/dist/server/main.js:1:3771406)
          at /opt/local/openscience-ui/dist/server/main.js:1:4685622
          at OperatorSubscriber2._this._next
    (/opt/local/openscience-ui/dist/server/main.js:1:309020)
          at OperatorSubscriber2.Subscriber2.next
    (/opt/local/openscience-ui/dist/server/main.js:1:3771406)
          at /opt/local/openscience-ui/dist/server/main.js:1:4200924
          at OperatorSubscriber2._this._next
    (/opt/local/openscience-ui/dist/server/main.js:1:309020)
          at OperatorSubscriber2.Subscriber2.next
    (/opt/local/openscience-ui/dist/server/main.js:1:3771406)

    which doesn't tell me much.

    I see a similar error in the browser console

    ERROR Error: undefined doesn't contain the link authn


    After clicking on the Login button I only get a white rectangle. The
    Login options do not show. In the browser console no errors are shown.
    Same in the terminal.

    Because neither the apache nor the anubis config is changed while
    running the frontend in dev or prod mode I assume there are some
    differences in dev and prod I do not know or understand. Or maybe a
    missing Header in apache I need for prod mode but not for dev mode.

    Does anybody have a glue where to look or can point me to any
    documentation I may find a solution? Or you may already have a solution?
    If you need any configs I use, just tell me.

    Thanks so far


-- Armin Wenz
    Universitätsbibliothek Mainz
    Leitung Bibliotheksanwendungen
    Jakob-Welder-Weg 12
    55128 Mainz
    Tel.: +49 6131 39-29830
    http://www.ub.uni-mainz.de <http://www.ub.uni-mainz.de>

-- All messages to this mailing list should adhere to the Code of
    Conduct: https://lyrasis.org/code-of-conduct/ <https://lyrasis.org/
    code-of-conduct/>
    ---
    You received this message because you are subscribed to the Google
    Groups "DSpace Technical Support" group.
    To unsubscribe from this group and stop receiving emails from it,
    send an email to [email protected]
    <mailto:dspace-tech%[email protected]>.
    To view this discussion visit https://groups.google.com/d/msgid/
    dspace-tech/7f9f15ba-6441-4b14-8a8a-c95ef9f329dc%40ub.uni-mainz.de
    <https://groups.google.com/d/msgid/dspace-
    tech/7f9f15ba-6441-4b14-8a8a-c95ef9f329dc%40ub.uni-mainz.de>.


--
Armin Wenz
Universitätsbibliothek Mainz
Leitung Bibliotheksanwendungen
Jakob-Welder-Weg 12
55128 Mainz
Tel.: +49 6131 39-29830
http://www.ub.uni-mainz.de

--
All messages to this mailing list should adhere to the Code of Conduct: 
https://lyrasis.org/code-of-conduct/
--- You received this message because you are subscribed to the Google Groups "DSpace Technical Support" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To view this discussion visit 
https://groups.google.com/d/msgid/dspace-tech/e579c921-90fc-4a8b-b561-a305228283eb%40ub.uni-mainz.de.

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature

Reply via email to