SOLVED: Traefik Reverse proxy works with https but shows "Select Server" with http

[davedv]

I have set up Jellyfin behind a Traefik reverse proxy, and I am trying to set up both https (from an external domain, jellyfin.mydomain.com) and http (with a jellyfin.local DNS) endpoints, both relaying to Jellyfin's http port.

Things work fine with the external https endpoint, but when trying to use the http endpoint through my local URL, I get a Jellyfin screen asking me to "Select a server", and clicking on the server, leads to an error message "We're unable to connect to the selected server right now"We

Switching the jellyfin.local config to an https endpoint and TLS works fine (but since I cannot have a properly-signed certificate, it's not ideal).

I have tried turning on/off the different middleware options, and modifying values in the network.xml file, but nothing seems to work.

Any idea what might be causing this?

Relevant parts of Jellyfin's docker compose:

Code:

[...]
        labels:
            - "traefik.enable=true"
            # Remote
            - "traefik.http.routers.jellyfin_secure.rule=Host(`jellyfin.mydomain.com`)"
            - "traefik.http.routers.jellyfin_secure.entrypoints=https"
            - "traefik.http.routers.jellyfin_secure.tls=true"
            - "traefik.http.routers.jellyfin_secure.tls.certresolver=myresolver"
            - "traefik.http.routers.jellyfin_secure.service=jellyfin"
            - 'traefik.http.routers.jellyfin_secure.middlewares=jellyfin-mw'
            # Local:
            - "traefik.http.routers.jellyfin.rule=Host(`jellyfin.local`)"
            - "traefik.http.routers.jellyfin.entrypoints=http"
            - "traefik.http.routers.jellyfin.service=jellyfin"
            - 'traefik.http.routers.jellyfin.middlewares=jellyfin-mw'
            # service
            - "traefik.http.services.jellyfin.loadbalancer.server.port=8096"
            - 'traefik.http.services.jellyfin.loadBalancer.passHostHeader=true'
            - 'traefik.http.middlewares.jellyfin-mw.headers.customResponseHeaders.X-Robots-Tag=noindex,nofollow,nosnippet,noarchive,notranslate,noimageindex'
            - 'traefik.http.middlewares.jellyfin-mw.headers.STSSeconds=315360000'
            - 'traefik.http.middlewares.jellyfin-mw.headers.STSIncludeSubdomains=true'
            - 'traefik.http.middlewares.jellyfin-mw.headers.STSPreload=true'
            - 'traefik.http.middlewares.jellyfin-mw.headers.forceSTSHeader=true'
            - 'traefik.http.middlewares.jellyfin-mw.headers.frameDeny=true'
            - 'traefik.http.middlewares.jellyfin-mw.headers.contentTypeNosniff=true'
            - 'traefik.http.middlewares.jellyfin-mw.headers.customresponseheaders.X-XSS-PROTECTION=1'
        networks:
            - traefik_net

networks:
    traefik_net:
        external: true  # Reuse the network from Traefik

Network.xml is the default one.