LG WebOS Error Code 27

[dnightbane]

There are 2 files in that directory

Code:

root@489c9d8f2654:/# ls /etc/nginx/conf.d/
jellyfin.conf  jellyfinsecure.conf

jellyfin.conf contains

Code:

server {
    listen 443 ssl;
    http2 on;
    server_name jellyfin.my.internal.domain;

    ssl_certificate     /etc/nginx/ssl/my.internal.domain/my.internal.domain.crt;
    ssl_certificate_key /etc/nginx/ssl/my.internal.domain/my.internal.domain.key;

    ## The default `client_max_body_size` is 1M, this might not be enough for some posters, etc.
    client_max_body_size 20M;

    # Security / XSS Mitigation Headers
    add_header X-Content-Type-Options "nosniff";

    # Permissions policy. May cause issues with some clients
    #    add_header Permissions-Policy "accelerometer=(), ambient-light-sensor=(), battery=(), bluetooth=(), camera=(), clipboard-read=(), display-capture=(), document-domain=(), encrypted-media=(), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), payment=(), publickey-credentials-get=(), serial=(), sync-xhr=(), usb=(), xr-spatial-tracking=()" always;

    # Content Security Policy
    # See: https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP
    # Enforces https content and restricts JS/CSS to origin
    # External Javascript (such as cast_sender.js for Chromecast) must be whitelisted.
    add_header Content-Security-Policy "default-src https: data: blob: ; img-src 'self' https://* ; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline' https://www.gstatic.com https://www.youtube.com blob:; worker-src 'self' blob:; connect-src 'self'; object-src 'none'; frame-ancestors 'self'; font-src 'self'";

    access_log /var/log/nginx/jellyfin/jellyfin.access.log;
    error_log /var/log/nginx/jellyfin/jellyfin.error.log;

    location / {
        # Proxy main Jellyfin traffic
        set_real_ip_from 10.200.200.2;
        proxy_pass http://jellyfin:8096;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
        proxy_set_header X-Forwarded-Protocol $scheme;
        proxy_set_header X-Forwarded-Host $http_host;

        # Disable buffering when the nginx proxy gets very resource heavy upon streaming
        proxy_buffering off;
    }

    location /socket {
        # Proxy Jellyfin Websockets traffic
        set_real_ip_from 10.200.200.2;
        proxy_pass http://jellyfin:8096;
        proxy_http_version 1.1;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection "upgrade";
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
        proxy_set_header X-Forwarded-Protocol $scheme;
        proxy_set_header X-Forwarded-Host $http_host;
    }
}
server {
    listen 443 ssl;
    http2 on;
    server_name jellystats.my.internal.domain;
    include /etc/nginx/conf.d/jellyfinsecure.conf;

    access_log /var/log/nginx/jellyfin/jellystats.access.log;
    error_log /var/log/nginx/jellyfin/jellystats.error.log;

    location / {
        proxy_set_header   X-Real-IP $remote_addr;
        proxy_set_header   X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header   Host $host;
        proxy_pass         http://jellystat:3000/;
        proxy_http_version 1.1;
        proxy_set_header   Upgrade $http_upgrade;
        proxy_set_header   Connection "upgrade";
    }
}

and jellyfinsecure.conf contains

Code:

ssl_certificate     /etc/nginx/ssl/my.internal.domain/my.internal.domain.crt;
    ssl_certificate_key /etc/nginx/ssl/my.internal.domain/my.internal.domain.key;
    add_header Strict-Transport-Security "max-age=15768000; includeSubDomains; preload;" always;
    add_header Referrer-Policy "no-referrer" always;
    add_header X-Content-Type-Options "nosniff" always;
    add_header X-Download-Options "noopen" always;
    add_header X-Frame-Options "SAMEORIGIN" always;
    add_header X-Permitted-Cross-Domain-Policies "none" always;
    add_header X-Robots-Tag "none" always;
    add_header X-XSS-Protection "1; mode=block" always;

the above block was what I was previously using however I removed it from the include for the server block for troubleshooting purposes

Command Output

Code:

$ curl --head -i -k https://jellyfin.my.internal.domain
HTTP/2 302
server: nginx
date: Mon, 10 Mar 2025 17:27:21 GMT
location: web/
x-content-type-options: nosniff
content-security-policy: default-src https: data: blob: ; img-src 'self' https://* ; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline' https://www.gstatic.com https://www.youtube.com blob:; worker-src 'self' blob:; connect-src 'self'; object-src 'none'; frame-ancestors 'self'; font-src 'self'