Hi George,I reduced my apache2.conf to match yours. But with no success. The problem remains the same.
But I have a question anyway:You are proxying both '/' and '/server' to [::1]:8923. Is there a reason for that or wouldn't "ProxyPass / http://[::1]:8923/"; etc be enough?
On 2026-03-26 11:56, george veranis wrote:
Set up in your Apache conf the following.Do not make other changes on the Angular side, because the complexity then is huge.<IfModule mod_ssl.c> <VirtualHost *:443> ServerName .... SSLEngine on ErrorLog ..... RequestHeader set "X-Real-Ip" expr=%{REMOTE_ADDR} RequestHeader set X-Forwarded-Proto "https" RequestHeader set "X-Http-Version" "%{SERVER_PROTOCOL}s" ProxyPreserveHost On ProxyRequests Off ProxyVia Off ProxyPass / http://[::1]:8923/ ProxyPassReverse / http://[::1]:8923/ ProxyPass /server http://[::1]:8923/ ProxyPassReverse /server http://[::1]:8923/ Include ..... SSLCertificateFile ...... SSLCertificateKeyFile .... </VirtualHost> </IfModule> <VirtualHost *:3000> ServerName ..... ProxyTimeout 300 ProxyRequests Off ExpiresActive On ExpiresDefault "access plus 30 seconds" ErrorLog /var/log/somewhere.. LogLevel warnProxyPass /server http://localhost:8080/server <http://localhost:8080/ server> ProxyPassReverse /server http://localhost:8080/server <http:// localhost:8080/server>ProxyPass / http://localhost:4000/ <http://localhost:4000/> ProxyPassReverse / http://localhost:4000/ <http://localhost:4000/> </VirtualHost>The same configuration we run it on DSpace 7, 8, or 9, and it is working perfectly with Anubis. Give it a try and let me know if it works with your case.GeorgeΣτις Πέμ 26 Μαρ 2026 στις 12:34 μ.μ., ο/η Armin Wenz <[email protected] mainz.de <mailto:[email protected]>> έγραψε:Hi, just a follow-up: While investigating further into that issue I disabled server-side rendering in config.prod.yml ssr: enabled: false After restarting the frontend the login modal is shown and I can login. After that I enabled general SSR again and checked the ssl.excludePathPatterns defined in config.yml. I recognized I get the login modal and be able to login from all these excluded URLs (like https://my.server/community-list <https:// my.server/community-list> or /search) but not from others (like /home) So it seems to be an issue with SSR because all URLs that use CSR are doing fine. Does that ring any bell? On 2026-03-24 14:55, Armin Wenz wrote: > Hi all, > > I am testing DSpace 9.2 (no CRIS) with anubis in front of it. I use > apache as proxy. > > When running the back- and frontend without anubis in front everything > works fine. > > When I put anubis between the proxy and the frontend I encounter a > different behaviour when running the frontend in development or in > production mode. > > For development mode I build the frontend via 'npm run build:dev' and > start it via > NODE_ENV="development" node ./dist/server/main.js > > In this case everything is working as expected. I got no relevant errors > (apart from 404 for google-analytics we don't use). When clicking on the > Login Button I see the modal showing the options for password or OIDC > Login. I can login as expected and everything's fine. > > When I build the frontend via 'npm run build:prod' and start it via > NODE_ENV="production" node ./dist/server/main.js > at first everything seems to be fine. The frontend is loading, I can > browse just fine. > In the terminal I got errors saying > > ERROR Error: undefined doesn't contain the link sites > at /opt/local/openscience-ui/dist/server/main.js:1:1622049 > at /opt/local/openscience-ui/dist/server/main.js:1:4685635 > at OperatorSubscriber2._this._next (/opt/local/openscience- ui/dist/ > server/main.js:1:309020) > at OperatorSubscriber2.Subscriber2.next (/opt/local/ openscience-ui/ > dist/server/main.js:1:3771406) > at /opt/local/openscience-ui/dist/server/main.js:1:4685622 > at OperatorSubscriber2._this._next (/opt/local/openscience- ui/dist/ > server/main.js:1:309020) > at OperatorSubscriber2.Subscriber2.next (/opt/local/ openscience-ui/ > dist/server/main.js:1:3771406) > at /opt/local/openscience-ui/dist/server/main.js:1:4200924 > at OperatorSubscriber2._this._next (/opt/local/openscience- ui/dist/ > server/main.js:1:309020) > at OperatorSubscriber2.Subscriber2.next (/opt/local/ openscience-ui/ > dist/server/main.js:1:3771406) > > which doesn't tell me much. > > I see a similar error in the browser console > > ERROR Error: undefined doesn't contain the link authn > > > After clicking on the Login button I only get a white rectangle. The > Login options do not show. In the browser console no errors are shown. > Same in the terminal. > > Because neither the apache nor the anubis config is changed while > running the frontend in dev or prod mode I assume there are some > differences in dev and prod I do not know or understand. Or maybe a > missing Header in apache I need for prod mode but not for dev mode. > > Does anybody have a glue where to look or can point me to any > documentation I may find a solution? Or you may already have a solution? > If you need any configs I use, just tell me. > > Thanks so far > >-- Armin WenzUniversitätsbibliothek Mainz Leitung Bibliotheksanwendungen Jakob-Welder-Weg 12 55128 Mainz Tel.: +49 6131 39-29830 http://www.ub.uni-mainz.de <http://www.ub.uni-mainz.de>-- All messages to this mailing list should adhere to the Code ofConduct: https://lyrasis.org/code-of-conduct/ <https://lyrasis.org/ code-of-conduct/> --- You received this message because you are subscribed to the Google Groups "DSpace Technical Support" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected] <mailto:dspace-tech%[email protected]>. To view this discussion visit https://groups.google.com/d/msgid/ dspace-tech/d265eeac-cdbc-4487-95a4-7cfb468f8e40%40ub.uni-mainz.de <https://groups.google.com/d/msgid/dspace-tech/d265eeac- cdbc-4487-95a4-7cfb468f8e40%40ub.uni-mainz.de>. -- George Veranis Dataly Tech Tel: +30 6936 35 14 03 Email: [email protected] <mailto:[email protected]> SkypeId: gveranis *Disclaimer:*The information contained in this e-mail is intended only for the use of the individuals or entities to which it is addressed and may contain information that is privileged and confidential, the disclosure of which is prohibited by law. If the reader of this message is not the intended recipient, you are hereby notified that any dissemination, distribution or copying of this communication is strictly prohibited. If you have received this e-mail in error, please notify us immediately on [email protected] <mailto:[email protected]> or send an email to [email protected] <mailto:[email protected]>and delete this e-mail from your system. Company with distinctive title Dataly Tech Single Member P.C., cannot accept any responsibility for the accuracy or completeness of this message and does not accept any liability for any errors or omissions in the context of this message as it has been transmitted over a public network. Internet communications cannot be guaranteed to be secure or error free as information could be intercepted, corrupted, or contain viruses. Attachments to this e-mail are checked for viruses; however, we do not accept any liability for any damage sustained by viruses and therefore you are kindly requested to check for viruses upon receipt.
-- Armin Wenz Universitätsbibliothek Mainz Leitung Bibliotheksanwendungen Jakob-Welder-Weg 12 55128 Mainz Tel.: +49 6131 39-29830 http://www.ub.uni-mainz.de -- All messages to this mailing list should adhere to the Code of Conduct: https://lyrasis.org/code-of-conduct/--- You received this message because you are subscribed to the Google Groups "DSpace Technical Support" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion visit https://groups.google.com/d/msgid/dspace-tech/2c7aca4c-9a33-47f8-8e83-b1ba1547bd28%40ub.uni-mainz.de.
smime.p7s
Description: S/MIME Cryptographic Signature
