# Stuck in NS\_ERROR\_REDIRECT\_LOOP after activating Traefik **URL:** \ **Category:** Installation Issues\ **Created:** [June 17, 2024, 3:07pm UTC](https://community.passbolt.com/t/stuck-in-ns-error-redirect-loop-after-activating-traefik/10225 "2024-06-17T15:07:32Z")\ **Posts on this page:** 6\ **Page:** 1
**Author:** ![Floggy](https://avatars.discourse-cdn.com/v4/letter/f/3bc359/32.png) [@Floggy](https://community.passbolt.com/u/Floggy)\ **Post date:** [June 17, 2024, 3:07pm UTC](https://community.passbolt.com/t/stuck-in-ns-error-redirect-loop-after-activating-traefik/10225/1 "2024-06-17T15:07:32Z")
**Checklist** [✅] I have read intro post: [About the Installation Issues category](https://community.passbolt.com/t/about-the-installation-issues-category/12) [✅] I have read the tutorials, help and searched for similar issues [✅] I provide relevant information about my server (component names and versions, etc.) [✅] I provide a copy of my logs and healthcheck [✅] I describe the steps I have taken to trouble shoot the problem [✅] I describe the steps on how to reproduce the issue Hi community, I have recently joined the Passbolt Club and setup a Docker installation of the CE version on an Ubuntu VM. Passbolt Version: CE Host: Docker Host System: Ubuntu 24 Image: passbolt/passbolt:4.8.0-1-ce And everything worked on the first try. - Admin account added - Set up Two Factor Authentication - Added a test user - Passwords created and Shared So a fully functional installation. And after veryfing that I proceeded to follow the Guide to get a Let’s Encrypt Certificate setup via Traefik. ([Docker automatic HTTPS configuration | Passbolt documentation.](https://www.passbolt.com/docs/hosting/configure/https/ce/docker-auto/)) But after doing that I now get a NS\_ERROR\_REDIRECT\_LOOP error when navigating to the subdomain. > I have replaced sensitive info in the following files with "\<\< something \>\> " I have veryfied that i have a valid Certificate by looking at the /shared/acme.json file: > **Excerpt from acme.json** > > ```auto > "Registration": { > "body": { > "status": "valid", > "contact": [ > "mailto:<>" > ] > }, > > ``` I have also veryfied that the passbolt container recieves the routed request from Traefik by looking at the passbolt logs: ```auto docker-compose -f docker-compose-ce.yaml logs -f passbolt ``` And observing activity there when eighter my plugin or my website request tries to access the URL. > **Docker Compose File** > > ```auto > version: "3.9" > services: > db: > image: mariadb:10.11 > restart: unless-stopped > environment: > MYSQL_RANDOM_ROOT_PASSWORD: "true" > MYSQL_DATABASE: "passbolt" > MYSQL_USER: "passbolt" > MYSQL_PASSWORD: "<>" > volumes: > - database_volume:/var/lib/mysql > > passbolt: > image: passbolt/passbolt:4.8.0-1-ce > #Alternatively you can use rootless: > #image: passbolt/passbolt:latest-ce-non-root > restart: unless-stopped > depends_on: > - db > environment: > APP_FULL_BASE_URL: https://passbolt.<> > DATASOURCES_DEFAULT_HOST: "db" > DATASOURCES_DEFAULT_USERNAME: "passbolt" > DATASOURCES_DEFAULT_PASSWORD: "<>" > DATASOURCES_DEFAULT_DATABASE: "passbolt" > EMAIL_DEFAULT_FROM_NAME: "Passbolt" > EMAIL_DEFAULT_FROM: "<>" > EMAIL_TRANSPORT_DEFAULT_HOST: "smtp.<>" > EMAIL_TRANSPORT_DEFAULT_PORT: "587" > EMAIL_TRANSPORT_DEFAULT_USERNAME: "<>" > EMAIL_TRANSPORT_DEFAULT_PASSWORD: "<>" > EMAIL_TRANSPORT_DEFAULT_TLS: "true" > PASSBOLT_SSL_FORCE: "true" > volumes: > - gpg_volume:/etc/passbolt/gpg > - jwt_volume:/etc/passbolt/jwt > command: > [ > "/usr/bin/wait-for.sh", > "-t", > "0", > "db:3306", > "--", > "/docker-entrypoint.sh", > ] > labels: > traefik.enable: "true" > traefik.http.routers.passbolt-http.entrypoints: "web" > traefik.http.routers.passbolt-http.rule: "Host(`passbolt.<>`)" > traefik.http.routers.passbolt-http.middlewares: "SslHeader@file" > traefik.http.routers.passbolt-https.middlewares: "SslHeader@file" > traefik.http.routers.passbolt-https.entrypoints: "websecure" > traefik.http.routers.passbolt-https.rule: "Host(`passbolt.<>`)" > traefik.http.routers.passbolt-https.tls: "true" > traefik.http.routers.passbolt-https.tls.certresolver: "letsencrypt" > #ports: > # - 80:80 > # - 443:443 > #Alternatively for non-root images: > # - 80:8080 > # - 443:4433 > traefik: > image: traefik:2.10.5 > restart: always > ports: > - 80:80 > - 443:443 > volumes: > - /var/run/docker.sock:/var/run/docker.sock:ro > - ./traefik.yaml:/traefik.yaml:ro > - ./conf/:/etc/traefik/conf > - ./shared/:/shared > > volumes: > database_volume: > gpg_volume: > jwt_volume: > > ``` > **traefik.yaml** > > ```auto > global: > sendAnonymousUsage: false > log: > level: INFO > format: common > providers: > docker: > endpoint: 'unix:///var/run/docker.sock' > watch: true > exposedByDefault: true > swarmMode: false > file: > directory: /etc/traefik/conf/ > watch: true > api: > dashboard: false > debug: false > insecure: false > entryPoints: > web: > address: ':80' > http: > redirections: > entryPoint: > to: websecure > scheme: https > permanent: true > websecure: > address: ':443' > certificatesResolvers: > letsencrypt: > acme: > email: <> > storage: /shared/acme.json > caServer: 'https://acme-v02.api.letsencrypt.org/directory' > keyType: EC256 > httpChallenge: > entryPoint: web > tlsChallenge: {} > > ``` > **conf/tls.yaml** > > ```auto > tls: > options: > default: > minVersion: VersionTLS12 > sniStrict: true > curvePreferences: > - CurveP521 > - CurveP384 > cipherSuites: > - TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 > - TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384 > - TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256 > > ``` > **conf/headers.yaml** > > ```auto > http: > middlewares: > SslHeader: > headers: > FrameDeny: true > AccessControlAllowMethods: 'GET,OPTIONS,PUT' > AccessControlAllowOriginList: > - origin-list-or-null > AccessControlMaxAge: 100 > AddVaryHeader: true > BrowserXssFilter: true > ContentTypeNosniff: true > ForceSTSHeader: true > STSIncludeSubdomains: true > STSPreload: true > ContentSecurityPolicy: default-src 'self' 'unsafe-inline' > CustomFrameOptionsValue: SAMEORIGIN > ReferrerPolicy: same-origin > PermissionsPolicy: vibrate 'self' > STSSeconds: 315360000 > > ``` To get the healcheck data i opened a shell inside the passbolt container and executed: ```auto su -s /bin/bash -c "/usr/share/php/passbolt/bin/cake passbolt healthcheck" www-data ``` And I got: > **Healthcheck Output** > > ```auto > warning: 512 :: SplFileInfo::openFile(/var/lib/passbolt/tmp/cache/persistent/myapp_cake_core_translations.cake_console.en_UK): Failed to open stream: Permission denied on line 393 of /usr/share/php/passbolt/vendor/cakephp/cakephp/src/Cache/Engine/FileEngine.php > warning: 512 :: SplFileInfo::openFile(/var/lib/passbolt/tmp/cache/persistent/myapp_cake_core_translations.cake_console.en_UK): Failed to open stream: Permission denied on line 393 of /usr/share/php/passbolt/vendor/cakephp/cakephp/src/Cache/Engine/FileEngine.php > > __________ > / __\____ _________/ /_____ / / /_ > / /_/ / __`/___ / ___/__ \/ __\/ /__ / > / ____/ /_/ (__ |__ ) /_/ / /_/ / / / > /_/ \ __,_/____ / ____/_.___ /\ ____/_/\__ / > > Open source password manager for teams > ------------------------------------------------------------------------------- > Healthcheck shell..... > ------------------------------------------------------------------------------- > > Environment > > [PASS] PHP version 8.2.18. > [PASS] PHP version is 8.1 or above. > [PASS] PCRE compiled with unicode support. > [PASS] Mbstring extension is installed. > [PASS] Intl extension is installed. > [PASS] GD or Imagick extension is installed. > [FAIL] The temporary directory and its content are not writable, or are executable. > [HELP] Ensure the temporary directory and its content are writable by the webserver user. > [HELP] you can try: > [HELP] sudo chown -R www-data:www-data /var/lib/passbolt/tmp/ > [HELP] sudo chmod -R 775 $(find /var/lib/passbolt/tmp/ -type d) > [HELP] sudo chmod -R 664 $(find /var/lib/passbolt/tmp/ -type f) > [PASS] The logs directory and its content are writable. > > Config files > > [PASS] The application config file is present > [WARN] The passbolt config file is missing in /etc/passbolt/ > [HELP] Copy /etc/passbolt/passbolt.default.php to /etc/passbolt/passbolt.php > [HELP] The passbolt config file is not required if passbolt is configured with environment variables > > Core config > > [PASS] Cache is working. > [PASS] Debug mode is off. > [PASS] Unique value set for security.salt > [PASS] Full base url is set to <> > [PASS] App.fullBaseUrl validation OK. > [FAIL] Could not reach the /healthcheck/status with the url specified in App.fullBaseUrl > [HELP] Check that the domain name is correct in /etc/passbolt/passbolt.php > [HELP] Check the network settings > > SSL Certificate > > [WARN] SSL peer certificate does not validate. > [WARN] Hostname does not match when validating certificates. > [WARN] Using a self-signed certificate. > [HELP] Check https://help.passbolt.com/faq/hosting/troubleshoot-ssl > > SMTP settings > > [PASS] The SMTP Settings plugin is enabled. > [PASS] SMTP Settings coherent. You may send a test email to validate them. > [WARN] The SMTP Settings source is: env variables. > [HELP] It is recommended to set the SMTP Settings in the database through the administration section. > [WARN] The SMTP Settings plugin endpoints are enabled. > [HELP] It is recommended to disable the plugin endpoints. > [HELP] Set the PASSBOLT_SECURITY_SMTP_SETTINGS_ENDPOINTS_DISABLED environment variable to true. > [HELP] Or set passbolt.security.smtpSettings.endpointsDisabled to true in /etc/passbolt/passbolt.php. > [PASS] No custom SSL configuration for SMTP server. > > JWT Authentication > > [PASS] The JWT Authentication plugin is enabled. > [FAIL] The /etc/passbolt/jwt/ directory should not be writable. > [HELP] You can try: > [HELP] sudo chown -Rf root:www-data /etc/passbolt/jwt/ > [HELP] sudo chmod 750 /etc/passbolt/jwt/ > [HELP] sudo chmod 640 /etc/passbolt/jwt/jwt.key > [HELP] sudo chmod 640 /etc/passbolt/jwt/jwt.pem > [PASS] A valid JWT key pair was found. > > GPG Configuration > > [PASS] PHP GPG Module is installed and loaded. > [PASS] The environment variable GNUPGHOME is set to /var/lib/passbolt/.gnupg. > [PASS] The directory /var/lib/passbolt/.gnupg containing the keyring is writable by the webserver user. > [FAIL] The server OpenPGP key is not set. > [HELP] Create a key, export it and add the fingerprint to /etc/passbolt/passbolt.php > [HELP] See. https://www.passbolt.com/help/tech/install#toc_gpg > [PASS] The public key file is defined in /etc/passbolt/passbolt.php and readable. > [PASS] The private key file is defined in /etc/passbolt/passbolt.php and readable. > [FAIL] The server key fingerprint doesn't match the one defined in /etc/passbolt/passbolt.php. > [HELP] Double check the key fingerprint, example: > [HELP] sudo su -s /bin/bash -c "gpg --list-keys --fingerprint --home /var/lib/passbolt/.gnupg" www-data | grep -i -B 2 'SERVER_KEY_EMAIL' > [HELP] SERVER_KEY_EMAIL: The email you used when you generated the server key. > [HELP] See. https://www.passbolt.com/help/tech/install#toc_gpg > [FAIL] The server public key defined in the /etc/passbolt/passbolt.php (or environment variables) is not in the keyring > [HELP] Import the private server key in the keyring of the webserver user. > [HELP] you can try: > [HELP] sudo su -s /bin/bash -c "gpg --home /var/lib/passbolt/.gnupg --import /etc/passbolt/gpg/serverkey_private.asc" www-data > [FAIL] The server key does not have a valid email id. > [HELP] Edit or generate another key with a valid email id. > [FAIL] The private key cannot be used to decrypt a message > [FAIL] The private key cannot be used to decrypt and verify a message > [FAIL] The public key cannot be used to verify a signature. > > Application configuration > > [PASS] Using latest passbolt version (4.8.0). > [PASS] Passbolt is configured to force SSL use. > [PASS] App.fullBaseUrl is set to HTTPS. > [PASS] Selenium API endpoints are disabled. > [PASS] Search engine robots are told not to index content. > [INFO] The Self Registration plugin is enabled. > [INFO] Registration is closed, only administrators can add users. > [PASS] The deprecated self registration public setting was not found in /etc/passbolt/passbolt.php. > [WARN] Host availability checking is disabled. > [HELP] Make sure this instance is not publicly available on the internet. > [HELP] Or set the PASSBOLT_EMAIL_VALIDATE_MX environment variable to true. > [HELP] Or set passbolt.email.validate.mx to true in /etc/passbolt/passbolt.php. > [PASS] Serving the compiled version of the javascript app. > [WARN] Some email notifications are disabled by the administrator. > [PASS] The database schema up to date. > > Database > > [PASS] The application is able to connect to the database > [PASS] 31 tables found. > [PASS] Some default content is present. > > [FAIL] 10 error(s) found. Hang in there! > > ``` And that looks alot like what I got from the healthcheck section on the Website before adding Treafik. But not entirely the same. Could anyone explain to me how I can debug this behavior? Or did I miss something in the Guides? Any help would be amazing, thank you for reading all this! ---
**Author:** ![Termindiego25](https://yyz1.discourse-cdn.com/flex031/user_avatar/community.passbolt.com/termindiego25/32/5517_2.png) [@Termindiego25](https://community.passbolt.com/u/Termindiego25)\ **Post date:** [June 18, 2024, 3:10pm UTC](https://community.passbolt.com/t/stuck-in-ns-error-redirect-loop-after-activating-traefik/10225/2 "2024-06-18T15:10:12Z")
Hello @Floggy , I was trying to set up Traeffik with Docker, but I cannot get it working, so I will follow your thread. To check and maybe it helps you to debug. When you executed the healthcheck, have you set up the environment variables before? Check [this guide](https://www.passbolt.com/docs/hosting/troubleshooting/docker/) ---
**Author:** ![Floggy](https://avatars.discourse-cdn.com/v4/letter/f/3bc359/32.png) [@Floggy](https://community.passbolt.com/u/Floggy)\ **Post date:** [June 18, 2024, 3:41pm UTC](https://community.passbolt.com/t/stuck-in-ns-error-redirect-loop-after-activating-traefik/10225/3 "2024-06-18T15:41:33Z")
Hi Termindiego25, Thx for your intrest. yes I have configured them in my docker-compose File like so: > **Excerpt from docker-compse-ce.yaml** > > ```auto > environment: > APP_FULL_BASE_URL: https://passbolt.<> > DATASOURCES_DEFAULT_HOST: "db" > DATASOURCES_DEFAULT_USERNAME: "passbolt" > DATASOURCES_DEFAULT_PASSWORD: "<>" > DATASOURCES_DEFAULT_DATABASE: "passbolt" > EMAIL_DEFAULT_FROM_NAME: "Passbolt" > EMAIL_DEFAULT_FROM: "<>" > EMAIL_TRANSPORT_DEFAULT_HOST: "smtp.<>" > EMAIL_TRANSPORT_DEFAULT_PORT: "587" > EMAIL_TRANSPORT_DEFAULT_USERNAME: "<>" > EMAIL_TRANSPORT_DEFAULT_PASSWORD: "<>" > EMAIL_TRANSPORT_DEFAULT_TLS: "true" > PASSBOLT_SSL_FORCE: "true" > > ``` are there any oher Env-Variables I sould include, I read the list of possible ones here: > **[Passbolt Environment Variables | Passbolt documentation.](https://www.passbolt.com/docs/hosting/configure/environment-reference/)** > > Environment variables you can use with passbolt But none of the other ones seemd critical for my needs. Also this configuration of Variables worked flawlessly before adding Traefik. ---
**Author:** ![Floggy](https://avatars.discourse-cdn.com/v4/letter/f/3bc359/32.png) [@Floggy](https://community.passbolt.com/u/Floggy)\ **Post date:** [June 18, 2024, 3:56pm UTC](https://community.passbolt.com/t/stuck-in-ns-error-redirect-loop-after-activating-traefik/10225/4 "2024-06-18T15:56:13Z")
Hi Termindiego25, me again, I have now followed all the steps in the Trobleshooting guide you mentioned. Healtchcheck output has gotten better: > **Healthcheck** > > ```auto > warning: 512 :: SplFileInfo::openFile(/var/lib/passbolt/tmp/cache/persistent/myapp_cake_core_translations.cake_console.en_UK): Failed to open stream: Permission denied on line 393 of /usr/share/php/passbolt/vendor/cakephp/cakephp/src/Cache/Engine/FileEngine.php > warning: 512 :: SplFileInfo::openFile(/var/lib/passbolt/tmp/cache/persistent/myapp_cake_core_translations.cake_console.en_UK): Failed to open stream: Permission denied on line 393 of /usr/share/php/passbolt/vendor/cakephp/cakephp/src/Cache/Engine/FileEngine.php > > __________ > / __\____ _________/ /_____ / / /_ > / /_/ / __`/___ / ___/__ \/ __\/ /__ / > / ____/ /_/ (__ |__ ) /_/ / /_/ / / / > /_/ \ __,_/____ / ____/_.___ /\ ____/_/\__ / > > Open source password manager for teams > ------------------------------------------------------------------------------- > Healthcheck shell > ------------------------------------------------------------------------------- > > Environment > > [PASS] PHP version 8.2.18. > [PASS] PHP version is 8.1 or above. > [PASS] PCRE compiled with unicode support. > [PASS] Mbstring extension is installed. > [PASS] Intl extension is installed. > [PASS] GD or Imagick extension is installed. > [FAIL] The temporary directory and its content are not writable, or are executable. > [HELP] Ensure the temporary directory and its content are writable by the webserver user. > [HELP] you can try: > [HELP] sudo chown -R www-data:www-data /var/lib/passbolt/tmp/ > [HELP] sudo chmod -R 775 $(find /var/lib/passbolt/tmp/ -type d) > [HELP] sudo chmod -R 664 $(find /var/lib/passbolt/tmp/ -type f) > [PASS] The logs directory and its content are writable. > > Config files > > [PASS] The application config file is present > [WARN] The passbolt config file is missing in /etc/passbolt/ > [HELP] Copy /etc/passbolt/passbolt.default.php to /etc/passbolt/passbolt.php > [HELP] The passbolt config file is not required if passbolt is configured with environment variables > > Core config > > [PASS] Cache is working. > [PASS] Debug mode is off. > [PASS] Unique value set for security.salt > [PASS] Full base url is set to https://passbolt.<> > [PASS] App.fullBaseUrl validation OK. > [FAIL] Could not reach the /healthcheck/status with the url specified in App.fullBaseUrl > [HELP] Check that the domain name is correct in /etc/passbolt/passbolt.php > [HELP] Check the network settings > > SSL Certificate > > [WARN] SSL peer certificate does not validate. > [WARN] Hostname does not match when validating certificates. > [WARN] Using a self-signed certificate. > [HELP] Check https://help.passbolt.com/faq/hosting/troubleshoot-ssl > > SMTP settings > > [PASS] The SMTP Settings plugin is enabled. > [PASS] SMTP Settings coherent. You may send a test email to validate them. > [WARN] The SMTP Settings source is: env variables. > [HELP] It is recommended to set the SMTP Settings in the database through the administration section. > [WARN] The SMTP Settings plugin endpoints are enabled. > [HELP] It is recommended to disable the plugin endpoints. > [HELP] Set the PASSBOLT_SECURITY_SMTP_SETTINGS_ENDPOINTS_DISABLED environment variable to true. > [HELP] Or set passbolt.security.smtpSettings.endpointsDisabled to true in /etc/passbolt/passbolt.php. > [PASS] No custom SSL configuration for SMTP server. > > JWT Authentication > > [PASS] The JWT Authentication plugin is enabled. > [FAIL] The /etc/passbolt/jwt/ directory should not be writable. > [HELP] You can try: > [HELP] sudo chown -Rf root:www-data /etc/passbolt/jwt/ > [HELP] sudo chmod 750 /etc/passbolt/jwt/ > [HELP] sudo chmod 640 /etc/passbolt/jwt/jwt.key > [HELP] sudo chmod 640 /etc/passbolt/jwt/jwt.pem > [PASS] A valid JWT key pair was found. > > GPG Configuration > > [PASS] PHP GPG Module is installed and loaded. > [PASS] The environment variable GNUPGHOME is set to /var/lib/passbolt/.gnupg. > [PASS] The directory /var/lib/passbolt/.gnupg containing the keyring is writable by the webserver user. > [PASS] The server OpenPGP key is not the default one. > [PASS] The public key file is defined in /etc/passbolt/passbolt.php and readable. > [PASS] The private key file is defined in /etc/passbolt/passbolt.php and readable. > [PASS] The server key fingerprint matches the one defined in /etc/passbolt/passbolt.php. > [PASS] The server public key defined in the /etc/passbolt/passbolt.php (or environment variables) is in the keyring. > [PASS] There is a valid email id defined for the server key. > [PASS] The public key can be used to encrypt a message. > [PASS] The private key can be used to sign a message. > [PASS] The public and private keys can be used to encrypt and sign a message. > [PASS] The private key can be used to decrypt a message. > [PASS] The private key can be used to decrypt and verify a message. > [PASS] The public key can be used to verify a signature. > [PASS] The server public key format is Gopengpg compatible. > [PASS] The server private key format is Gopengpg compatible. > > Application configuration > > [PASS] Using latest passbolt version (4.8.0). > [PASS] Passbolt is configured to force SSL use. > [PASS] App.fullBaseUrl is set to HTTPS. > [PASS] Selenium API endpoints are disabled. > [PASS] Search engine robots are told not to index content. > [INFO] The Self Registration plugin is enabled. > [INFO] Registration is closed, only administrators can add users. > [PASS] The deprecated self registration public setting was not found in /etc/passbolt/passbolt.php. > [WARN] Host availability checking is disabled. > [HELP] Make sure this instance is not publicly available on the internet. > [HELP] Or set the PASSBOLT_EMAIL_VALIDATE_MX environment variable to true. > [HELP] Or set passbolt.email.validate.mx to true in /etc/passbolt/passbolt.php. > [PASS] Serving the compiled version of the javascript app. > [WARN] Some email notifications are disabled by the administrator. > [PASS] The database schema up to date. > > Database > > [PASS] The application is able to connect to the database > [PASS] 31 tables found. > [PASS] Some default content is present. > > [FAIL] 3 error(s) found. Hang in there! > > ``` Datacheck seems successful to me all passes: > **Data Check** > > ```auto > warning: 512 :: SplFileInfo::openFile(/var/lib/passbolt/tmp/cache/persistent/myapp_cake_core_translations.cake_console.en_UK): Failed to open stream: Permission denied on line 393 of /usr/share/php/passbolt/vendor/cakephp/cakephp/src/Cache/Engine/FileEngine.php > warning: 512 :: SplFileInfo::openFile(/var/lib/passbolt/tmp/cache/persistent/myapp_cake_core_translations.cake_console.en_UK): Failed to open stream: Permission denied on line 393 of /usr/share/php/passbolt/vendor/cakephp/cakephp/src/Cache/Engine/FileEngine.php > > __________ > / __\____ _________/ /_____ / / /_ > / /_/ / __`/___ / ___/__ \/ __\/ /__ / > / ____/ /_/ (__ |__ ) /_/ / /_/ / / / > /_/ \ __,_/____ / ____/_.___ /\ ____/_/\__ / > > Open source password manager for teams > ------------------------------------------------------------------------------- > Data check shell > [PASS] Data integrity for AuthenticationTokens. > [PASS] Can validate: 6/6 > [PASS] Data integrity for Comments. > [PASS] Can validate: 0/0 > [PASS] Data integrity for Favorites. > [PASS] Can validate: 0/0 > [PASS] Data integrity for Gpgkeys. > [PASS] Can encrypt: 2/2 > [PASS] Pass validation service checks: 2/2 > [PASS] Entity data and armored key data matches: 2/2 > [PASS] Is not expired: 2/2 > [PASS] Is armored key format valid: 2/2 > [PASS] Data integrity for Groups. > [PASS] Can validate: 0/0 > [PASS] Data integrity for Profiles. > [PASS] Can validate: 2/2 > [PASS] Data integrity for Resources. > [PASS] Can validate: 2/2 > [PASS] Data integrity for Secrets. > [PASS] Can validate: 3/3 > [PASS] Data integrity for Users. > [PASS] Can validate: 2/2 > > ``` Migrations are all “up” i assume this is good: > **Migration Check** > > ```auto > using migration paths > - /etc/passbolt/Migrations > using seed paths > using environment default > > Status Migration ID Migration Name > ----------------------------------------- > up 20170830064410 V162InitialMigration > up 20170830065037 V200ActiveMustBeBoolean > up 20170830065038 V200DropUnusedProfileFields > up 20170830065039 V200IncreaseEmailSize > up 20170830065040 V200DropUnusedCreatedBy > up 20170830065041 V200MigrateUUID > up 20170830065042 V200MigrateKeyField > up 20171002061834 V200DropUnusedResourceFields > up 20171006141922 V200AddFavoriteModifiedField > up 20171009093000 V200DropUnusedPermissionTypesTable > up 20171009093001 V200MigrateEmailsTable > up 20171009093002 V200MigrateFileStorageTable > up 20171025154754 V200AddCommentsUserIdField > up 20180102065042 V200MigrateForeignIdField > up 20180102180000 V200DropUnusedTables > up 20180102221500 V200AddMissingTablesIndexes > up 20180413171600 V202ForceColumnsCharset > up 20180503135810 V210InstallAccountSettingsPlugin > up 20180930151500 V240AddAuthenticationTokenType > up 20181002171600 V240ExtendAccountSettingsPlugin > up 20181024124300 V250ChangeMfaAccountSettingsDataFormat > up 20181210170000 V270AddMissingIndexes > up 20190106170300 V280AdditionalEmailMigration > up 20190106170301 V280AdditionalFileStorageMigration > up 20190106170302 V280FileDirectoryPathsMigrations > up 20190112124290 V270AddActionsTable > up 20190112124300 V270AddActionLogsTable > up 20190121111100 V270AddEntitiesHistoryTable > up 20190121121100 V270AddPermissionsHistoryTable > up 20190211124300 V270AddSecretsHistoryTable > up 20190221124300 V270AddSecretAccessesTable > up 20190512115400 V2100AddOrganizationSettingsTable > up 20190623143400 V2110ExtendKeyIdSizeField > up 20190923103000 V2120UpdateEmailQueue > up 20191119092944 V2130AddFoldersTable > up 20191119092945 V2130AddFoldersHistoryTable > up 20191119160000 V2120DropUnusedTables > up 20191216092944 V2130AddFoldersRelationsTable > up 20191216092945 V2130AddFoldersRelationsHistoryTable > up 20200108135000 V2130DropLegacyAnonymousUser > up 20200205135000 V2130AddResourcesFoldersRelations > up 20200319135000 V2130SoftDeleteGpgKeysForSoftDeletedUsers > up 20200501182000 V2130ReconcileLoginHistory > up 20200609192000 V2130AddMissingFoldersIndexes > up 20200806110200 V300ExtendSecretsDataField > up 20200806110201 V300AddResourceTypeIdField > up 20200806110202 V300AddResourceTypesTable > up 20200806110203 V300AddResourceTypesDefaultData > up 20200806110204 V300AddResourceTypesToResources > up 20200824191900 V2136CleanupUnusedActionLogs > up 20200824191901 V2136AddActionLogsRelatedIndexes > up 20201221093528 V300DeleteMetadataOfSoftDeletedResources > up 20210111163200 V300AddActionLogsExtraIndex > up 20210121141742 V320AddAvatarsTable > up 20210125212543 V320TransferFileStorageToAvatars > up 20210206521254 V320DropFileStorage > up 20210329110000 V320FixResourceTypesDefaultData > up 20210427124200 V330AddMobileTransferTable > up 20211027202137 V331ConvertEmailVariablesToJson > up 20211121231000 V3120MigrateASCIIFieldsEncodingFolders > up 20211121231300 V340MigrateASCIIFieldsEncoding > up 20211121232400 V340AddFoldersRelationsExtraIndexes > up 20211122732400 V350ConvertIdFieldsToUuidFields > up 20211215180000 V350RemovePermissionsTypeIndex > up 20211215180001 V350AddPermissionsCombinedIndex > up 20220103180000 V350IncreaseResourcesNameUsernameColumnsSize > up 20220103180001 V350IncreaseResourcesNameUsernameLengthInResourceTypes > up 20220405232411 V360RemoveAuthLoginLoginGetActionFromLogs > up 20220405234003 V360RemoveAuthCheckSessionCheckSessionGetFromLogs > up 20220405234359 V360RemoveAuthIsAuthenticatedIsAuthenticatedFromLogs > up 20220802151030 V380AlterNameAndSlugOnResourceTypes > up 20220802151740 V380TrimSpacesOnResourceTypesNameAndSlug > up 20220809190030 V372ImproveFoldersRelationsIndexesAddItemsToUserTreePerformance > up 20220824081645 V380AlterNameLengthOnFolders > up 20220913233909 V380SaveSmtpSettingsInDb > up 20220915150002 V380AlterNameLengthOnFoldersHistory > up 20220922082044 V380SaveMfaOrganizationSettingsInDb > up 20230202094451 V3110SaveMfaOrganizationSettingsInDbInDuoV4Format > up 20230308124720 V3120DropActionLogsDuplicateIndexes > up 20230414124720 V3122DeleteDescriptionForResourceOfTypePasswordAndDescription > up 20230418103007 V400AddTotpResourceTypes > up 20230512220600 V410ImproveFoldersRelationsIndexesShareFoldersPerformance > up 20230601101058 V410RemoveTypeFromTotpResourceTypes > up 20230607174200 V410DeleteRootRole > up 20230607174300 V410AddRbacsTables > up 20230607174301 V410InsertUiActions > up 20230607174302 V410InsertDefaultRbacsUiActions > up 20230718083939 V420AddUserIdIndexToProfiles > up 20230911100418 V430AddUserDisabledField > up 20231005121310 V440MobileTransferInsertUiActions > up 20231005123634 V440MobileTransferDefaultRbacsUiActions > up 20231108114414 V441AlterUidOnGpgkeys > up 20231115235026 V441DropUserAgents > up 20231211195437 V450AddExpiredDateFieldToResources > up 20240226143754 V460ShareFolderUiActions > up 20240226145601 V460ShareFolderDefaultRbacsUiActions > > ``` And finaly the connection to the Database container was sucessful and i was able to execute SQL queryies. Does that tell you anything more about the Redirect Loop? I was looking at the 3 remaining errors but nothing tuck out at me reagrding that looping behavior. ---
**Author:** ![Termindiego25](https://yyz1.discourse-cdn.com/flex031/user_avatar/community.passbolt.com/termindiego25/32/5517_2.png) [@Termindiego25](https://community.passbolt.com/u/Termindiego25)\ **Post date:** [June 18, 2024, 4:05pm UTC](https://community.passbolt.com/t/stuck-in-ns-error-redirect-loop-after-activating-traefik/10225/5 "2024-06-18T16:05:42Z")
What is shown in the traeffik and passbolt logs when you try to access? Use `docker logs $container_name` and paste the response but please, blind all sensitive information ---
**Author:** ![Floggy](https://avatars.discourse-cdn.com/v4/letter/f/3bc359/32.png) [@Floggy](https://community.passbolt.com/u/Floggy)\ **Post date:** [June 18, 2024, 4:17pm UTC](https://community.passbolt.com/t/stuck-in-ns-error-redirect-loop-after-activating-traefik/10225/6 "2024-06-18T16:17:33Z")
Hi, the Traefik logs show basically nothing , just the startup sequence and that a valid certificate is found. the passbolt logs look like this when I try to access the domain: > **Summary** > > ```auto > passbolt-passbolt-1 | 172.18.0.3 - - [18/Jun/2024:16:13:12 +0000] "GET / HTTP/1.1" 302 5 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0" > passbolt-passbolt-1 | 172.18.0.3 - - [18/Jun/2024:16:13:12 +0000] "GET / HTTP/1.1" 302 5 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0" > passbolt-passbolt-1 | 172.18.0.3 - - [18/Jun/2024:16:13:12 +0000] "GET / HTTP/1.1" 302 5 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0" > passbolt-passbolt-1 | 172.18.0.3 - - [18/Jun/2024:16:13:12 +0000] "GET / HTTP/1.1" 302 5 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0" > passbolt-passbolt-1 | 172.18.0.3 - - [18/Jun/2024:16:13:12 +0000] "GET / HTTP/1.1" 302 5 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0" > passbolt-passbolt-1 | 172.18.0.3 - - [18/Jun/2024:16:13:12 +0000] "GET / HTTP/1.1" 302 5 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0" > passbolt-passbolt-1 | 172.18.0.3 - - [18/Jun/2024:16:13:12 +0000] "GET / HTTP/1.1" 302 5 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0" > passbolt-passbolt-1 | 172.18.0.3 - - [18/Jun/2024:16:13:12 +0000] "GET / HTTP/1.1" 302 5 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0" > passbolt-passbolt-1 | 172.18.0.3 - - [18/Jun/2024:16:13:12 +0000] "GET / HTTP/1.1" 302 5 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0" > passbolt-passbolt-1 | 172.18.0.3 - - [18/Jun/2024:16:13:12 +0000] "GET / HTTP/1.1" 302 5 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0" > passbolt-passbolt-1 | 172.18.0.3 - - [18/Jun/2024:16:13:12 +0000] "GET / HTTP/1.1" 302 5 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0" > passbolt-passbolt-1 | 172.18.0.3 - - [18/Jun/2024:16:13:12 +0000] "GET / HTTP/1.1" 302 5 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0" > passbolt-passbolt-1 | 172.18.0.3 - - [18/Jun/2024:16:13:12 +0000] "GET / HTTP/1.1" 302 5 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0" > passbolt-passbolt-1 | 172.18.0.3 - - [18/Jun/2024:16:13:12 +0000] "GET / HTTP/1.1" 302 5 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0" > passbolt-passbolt-1 | 172.18.0.3 - - [18/Jun/2024:16:13:12 +0000] "GET / HTTP/1.1" 302 5 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0" > passbolt-passbolt-1 | 172.18.0.3 - - [18/Jun/2024:16:13:12 +0000] "GET / HTTP/1.1" 302 5 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0" > passbolt-passbolt-1 | 172.18.0.3 - - [18/Jun/2024:16:13:12 +0000] "GET / HTTP/1.1" 302 5 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0" > passbolt-passbolt-1 | 172.18.0.3 - - [18/Jun/2024:16:13:12 +0000] "GET / HTTP/1.1" 302 5 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0" > passbolt-passbolt-1 | 172.18.0.3 - - [18/Jun/2024:16:13:12 +0000] "GET / HTTP/1.1" 302 5 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0" > passbolt-passbolt-1 | 172.18.0.3 - - [18/Jun/2024:16:13:12 +0000] "GET / HTTP/1.1" 302 5 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0" > passbolt-passbolt-1 | 172.18.0.3 - - [18/Jun/2024:16:13:12 +0000] "GET / HTTP/1.1" 302 5 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0" > passbolt-passbolt-1 | 172.18.0.3 - - [18/Jun/2024:16:13:12 +0000] "GET /auth/is-authenticated.json?api-version=v2 HTTP/1.1" 302 5 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0" > passbolt-passbolt-1 | 172.18.0.3 - - [18/Jun/2024:16:13:12 +0000] "GET /auth/is-authenticated.json?api-version=v2 HTTP/1.1" 302 5 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0" > passbolt-passbolt-1 | 172.18.0.3 - - [18/Jun/2024:16:13:12 +0000] "GET /auth/is-authenticated.json?api-version=v2 HTTP/1.1" 302 5 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0" > passbolt-passbolt-1 | 172.18.0.3 - - [18/Jun/2024:16:13:12 +0000] "GET /auth/is-authenticated.json?api-version=v2 HTTP/1.1" 302 5 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0" > passbolt-passbolt-1 | 172.18.0.3 - - [18/Jun/2024:16:13:12 +0000] "GET /auth/is-authenticated.json?api-version=v2 HTTP/1.1" 302 5 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0" > passbolt-passbolt-1 | 172.18.0.3 - - [18/Jun/2024:16:13:12 +0000] "GET /auth/is-authenticated.json?api-version=v2 HTTP/1.1" 302 5 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0" > passbolt-passbolt-1 | 172.18.0.3 - - [18/Jun/2024:16:13:12 +0000] "GET /auth/is-authenticated.json?api-version=v2 HTTP/1.1" 302 5 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0" > passbolt-passbolt-1 | 172.18.0.3 - - [18/Jun/2024:16:13:12 +0000] "GET /auth/is-authenticated.json?api-version=v2 HTTP/1.1" 302 5 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0" > passbolt-passbolt-1 | 172.18.0.3 - - [18/Jun/2024:16:13:12 +0000] "GET /auth/is-authenticated.json?api-version=v2 HTTP/1.1" 302 5 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0" > passbolt-passbolt-1 | 172.18.0.3 - - [18/Jun/2024:16:13:12 +0000] "GET /auth/is-authenticated.json?api-version=v2 HTTP/1.1" 302 5 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0" > passbolt-passbolt-1 | 172.18.0.3 - - [18/Jun/2024:16:13:12 +0000] "GET /auth/is-authenticated.json?api-version=v2 HTTP/1.1" 302 5 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0" > passbolt-passbolt-1 | 172.18.0.3 - - [18/Jun/2024:16:13:12 +0000] "GET /auth/is-authenticated.json?api-version=v2 HTTP/1.1" 302 5 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0" > passbolt-passbolt-1 | 172.18.0.3 - - [18/Jun/2024:16:13:12 +0000] "GET /auth/is-authenticated.json?api-version=v2 HTTP/1.1" 302 5 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0" > passbolt-passbolt-1 | 172.18.0.3 - - [18/Jun/2024:16:13:12 +0000] "GET /auth/is-authenticated.json?api-version=v2 HTTP/1.1" 302 5 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0" > passbolt-passbolt-1 | 172.18.0.3 - - [18/Jun/2024:16:13:12 +0000] "GET /auth/is-authenticated.json?api-version=v2 HTTP/1.1" 302 5 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0" > passbolt-passbolt-1 | 172.18.0.3 - - [18/Jun/2024:16:13:12 +0000] "GET /auth/is-authenticated.json?api-version=v2 HTTP/1.1" 302 5 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0" > passbolt-passbolt-1 | 172.18.0.3 - - [18/Jun/2024:16:13:12 +0000] "GET /auth/is-authenticated.json?api-version=v2 HTTP/1.1" 302 5 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0" > passbolt-passbolt-1 | 172.18.0.3 - - [18/Jun/2024:16:13:12 +0000] "GET /auth/is-authenticated.json?api-version=v2 HTTP/1.1" 302 5 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0" > passbolt-passbolt-1 | 172.18.0.3 - - [18/Jun/2024:16:13:12 +0000] "GET /auth/is-authenticated.json?api-version=v2 HTTP/1.1" 302 5 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0" > passbolt-passbolt-1 | 172.18.0.3 - - [18/Jun/2024:16:13:12 +0000] "GET /auth/is-authenticated.json?api-version=v2 HTTP/1.1" 302 5 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0" > passbolt-passbolt-1 | 172.18.0.3 - - [18/Jun/2024:16:13:12 +0000] "GET /auth/is-authenticated.json?api-version=v2 HTTP/1.1" 302 5 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0" > passbolt-passbolt-1 | 172.18.0.3 - - [18/Jun/2024:16:13:12 +0000] "GET /auth/is-authenticated.json?api-version=v2 HTTP/1.1" 302 5 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0" > passbolt-passbolt-1 | 172.18.0.3 - - [18/Jun/2024:16:13:12 +0000] "GET /auth/is-authenticated.json?api-version=v2 HTTP/1.1" 302 5 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0" > passbolt-passbolt-1 | 172.18.0.3 - - [18/Jun/2024:16:13:12 +0000] "GET /auth/is-authenticated.json?api-version=v2 HTTP/1.1" 302 5 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0" > passbolt-passbolt-1 | 172.18.0.3 - - [18/Jun/2024:16:13:12 +0000] "GET /auth/is-authenticated.json?api-version=v2 HTTP/1.1" 302 5 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0" > passbolt-passbolt-1 | 172.18.0.3 - - [18/Jun/2024:16:13:12 +0000] "GET /auth/is-authenticated.json?api-version=v2 HTTP/1.1" 302 5 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0" > passbolt-passbolt-1 | 172.18.0.3 - - [18/Jun/2024:16:13:12 +0000] "GET /auth/is-authenticated.json?api-version=v2 HTTP/1.1" 302 5 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0" > passbolt-passbolt-1 | 172.18.0.3 - - [18/Jun/2024:16:13:12 +0000] "GET /auth/is-authenticated.json?api-version=v2 HTTP/1.1" 302 5 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0" > passbolt-passbolt-1 | 172.18.0.3 - - [18/Jun/2024:16:13:12 +0000] "GET /auth/is-authenticated.json?api-version=v2 HTTP/1.1" 302 5 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0" > passbolt-passbolt-1 | 172.18.0.3 - - [18/Jun/2024:16:13:12 +0000] "GET /auth/is-authenticated.json?api-version=v2 HTTP/1.1" 302 5 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0" > passbolt-passbolt-1 | 172.18.0.3 - - [18/Jun/2024:16:13:12 +0000] "GET /auth/is-authenticated.json?api-version=v2 HTTP/1.1" 302 5 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0" > passbolt-passbolt-1 | 172.18.0.3 - - [18/Jun/2024:16:13:12 +0000] "GET /auth/is-authenticated.json?api-version=v2 HTTP/1.1" 302 5 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0" > passbolt-passbolt-1 | 172.18.0.3 - - [18/Jun/2024:16:13:12 +0000] "GET /auth/is-authenticated.json?api-version=v2 HTTP/1.1" 302 5 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0" > passbolt-passbolt-1 | 172.18.0.3 - - [18/Jun/2024:16:13:12 +0000] "GET /auth/is-authenticated.json?api-version=v2 HTTP/1.1" 302 5 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0" > passbolt-passbolt-1 | 172.18.0.3 - - [18/Jun/2024:16:13:12 +0000] "GET /auth/is-authenticated.json?api-version=v2 HTTP/1.1" 302 5 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0" > passbolt-passbolt-1 | 172.18.0.3 - - [18/Jun/2024:16:13:12 +0000] "GET /auth/is-authenticated.json?api-version=v2 HTTP/1.1" 302 5 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0" > passbolt-passbolt-1 | 172.18.0.3 - - [18/Jun/2024:16:13:12 +0000] "GET /auth/is-authenticated.json?api-version=v2 HTTP/1.1" 302 5 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0" > passbolt-passbolt-1 | 172.18.0.3 - - [18/Jun/2024:16:13:12 +0000] "GET /auth/is-authenticated.json?api-version=v2 HTTP/1.1" 302 5 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0" > passbolt-passbolt-1 | 172.18.0.3 - - [18/Jun/2024:16:13:12 +0000] "GET /auth/is-authenticated.json?api-version=v2 HTTP/1.1" 302 5 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0" > passbolt-passbolt-1 | 172.18.0.3 - - [18/Jun/2024:16:13:12 +0000] "GET /auth/is-authenticated.json?api-version=v2 HTTP/1.1" 302 5 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0" > passbolt-passbolt-1 | 172.18.0.3 - - [18/Jun/2024:16:13:12 +0000] "GET /auth/is-authenticated.json?api-version=v2 HTTP/1.1" 302 5 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0" > passbolt-passbolt-1 | 172.18.0.3 - - [18/Jun/2024:16:13:12 +0000] "GET /auth/is-authenticated.json?api-version=v2 HTTP/1.1" 302 5 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0" > > ``` It mirrors the Redirect loop until the browser cuts the connection because of to many redirects. thats how it looks from the browser debugger: ![Screenshot 2024-06-18 181557](https://canada1.discourse-cdn.com/flex031/uploads/passbolt/original/2X/6/6d875e3bb6053585c877542b9f0afc7f504cbb96.png)