tobychui/zoraxy

AI Summary: The user is experiencing 521/502 errors with Zoraxy, a reverse proxy, on their UGreen NAS, where some reverse proxies work while others fail. Zoraxy's uptime monitor marks upstreams as offline due to 'Ping upstream timeout' errors, even though these upstreams are manually reachable. The user suspects a protocol mismatch in Zoraxy's health checks, observing it attempts HTTP pings to HTTPS ports and vice-versa.

AI Summary: A user is experiencing sync failures with an application proxied by Zoraxy, similar to issues typically resolved in Nginx by specific buffer settings. They suspect Zoraxy's lack of exposed buffer configuration is the cause. The user is asking if this hypothesis is correct and if there's a way to configure equivalent buffer behavior within Zoraxy.

AI Summary: The user is seeking assistance with managing Git tags, specifically asking for instructions on how to rename or delete an existing tag. This is a common 'how-to' question related to Git repository operations.

AI Summary: The user reports that the Hetzner DNS Challenge for ACME is no longer functioning after Hetzner integrated its DNS Console into the main Hetzner Cloud Console. They suspect a change in the underlying Hetzner DNS API, as indicated by an error message stating the domain zone could not be found using a 'hetzner (legacy)' method. The user is seeking confirmation on whether this is a known issue requiring an update to the ACME client's Hetzner integration or a user-side misconfiguration.

AI Summary: The user is migrating from Nginx Proxy Manager to Zoraxy and is struggling to integrate Tinyauth, an authentication gateway. While Tinyauth is successfully reverse-proxied, it fails to enforce authentication for other applications proxied through Zoraxy, which load directly without requiring login, unlike the "forward auth" behavior experienced with NPM.

AI Summary: The user is experiencing high disk usage due to large log files generated by Zoraxy v3.2.5 under high traffic. They are requesting a way to completely disable the logging function to prevent server capacity from being quickly exhausted.

AI Summary: The user needs to determine how to implement Keycloak group-based access control with Zoraxy, specifically replicating functionality from a setup using Nginx Proxy Manager, oauth2proxy, and Keycloak. This involves figuring out if Zoraxy's built-in authentication or a plugin (like ForwardAuth) can handle Keycloak group membership checks to restrict access to specific applications.

AI Summary: The user is experiencing high CPU usage in Zoraxy (version 3.2.5) under synthetic load using wrk. The task is to help the user identify the performance bottleneck within Zoraxy by suggesting which module(s) to investigate for debugging purposes.

AI Summary: The user needs to determine if Zoraxy (a reverse proxy) supports binding to specific IP addresses, allowing it to listen only on selected interfaces while leaving others (e.g., ip4) available for other services like Nginx. The user is running Zoraxy version 3.2.4 outside of Docker, behind a CGNAT router using IPv6.

AI Summary: The user needs help configuring the Zoraxy reverse proxy to work with Pocket-ID for OAuth2 single sign-on (SSO). Specifically, they need assistance determining the correct callback URL to use within the Pocket-ID configuration to allow successful authentication and redirection after login.

AI Summary: The user needs help configuring Zoraxy's ACME DNS challenge to work with Cloudflare. Specifically, they need clarification on how to map their existing Cloudflare Zone ID and Token to Zoraxy's `AuthEmail`, `AuthKey`, `AuthToken`, and `ZoneToken` fields. The task involves understanding the differences between how Cloudflare and Zoraxy (using the `lego` library) represent authentication credentials for DNS challenges.

AI Summary: The user is experiencing an issue where the OpenID Connect (OIDC) login option is not appearing on the Zoraxy login page, despite having configured SSO with Keycloak. Troubleshooting steps are needed to determine why the OIDC option isn't showing, potentially involving checking Zoraxy and Keycloak configurations, network settings, and the Zoraxy Docker setup.

AI Summary: The user is trying to configure Authentik behind Zoraxy as a reverse proxy, but encounters a TLS handshake error due to a bad certificate. The task involves troubleshooting the certificate configuration within Zoraxy to ensure it correctly proxies requests to Authentik and presents a valid certificate to clients.

AI Summary: The task requires configuring Zoraxy to act as a reverse proxy for Adguard Home, allowing only access to the `/dns-query` endpoint while blocking all other access to the Adguard Home web interface. This involves creating a reverse proxy rule in Zoraxy to forward requests to the `/dns-query` path of Adguard Home and blocking all other requests.

AI Summary: The user needs to implement user authorization within Zoraxy's OAuth2 integration with Google. Currently, any Google account can authenticate; the task is to add a mechanism to restrict access to only specific Google accounts within Zoraxy.

AI Summary: The user needs help configuring a Content Security Policy (CSP) for a specific host within the Zoraxy reverse proxy. They've tried adding CSP headers via Zoraxy's "Custom Headers" feature without success and are seeking guidance on the correct method, given their use of Docker, Cloudflare, and a specific CSP configuration previously used with Caddy.

AI Summary: The task is to enhance the security of the Zoraxy reverse proxy by modifying its behavior to obfuscate its presence. This involves removing or altering the `x-proxy-by` header to prevent version identification and customizing the default site's response to mislead potential attackers about the underlying reverse proxy software.

AI Summary: Investigate why the delete button for HTTP proxy rules is missing in Zoraxy v3.2.3's UI. This likely involves examining the UI code (possibly React or similar framework) and the backend logic handling rule deletion to identify the cause of the missing button. A potential solution might involve adding the button to the UI or fixing a bug preventing its display.