SOLVED: I can't access from LG TV with Caddy

[Drake97]

Hello everyone,

As the title says, I can't access my content server from any LG TV, at the moment of entering the URL it stays on black screen as if it was thinking infinitely.

This happened since I followed a tutorial on how to activate the connection through a reverse proxy, in my case Caddy, and using duckdns as a dynamic dns server.
I can login on all the usual platforms, only on LG I can't and I don't know if it's because of Caddy, Duckdns or some configuration I have which is blocking access.

I checked the Jellyfin logs and there is nothing about it, it is as if it does not connect and I don't know what else I can do.

Any help is welcome and if you need logs or screenshots, just ask me.

Regards

[TheDreadPirate]

From a linux command line, what is the output of this command?

Code:

curl -X HEAD -I https://jellyfin.domain.tld

Replace the URL with your actual address. It should look something like this.

Code:

HTTP/2 302
server: nginx/1.26.2
date: Fri, 13 Dec 2024 19:26:11 GMT
location: web/
strict-transport-security: max-age=63072000
x-xss-protection: 0
x-content-type-options: nosniff
last-modified: Friday, 13-Dec-2024 19:26:11 GMT
cache-control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
permissions-policy: accelerometer=(), ambient-light-sensor=(), battery=(), bluetooth=(), camera=(), clipboard-read=(), display-capture=(), document-domain=(), encrypted-media=(), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), payment=(), publickey-credentials-get=(), serial=(), sync-xhr=(), usb=(), xr-spatial-tracking=()
origin-agent-cluster: ?1
content-security-policy: default-src https: data: blob: ; img-src 'self' https://* ; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline' https://www.gstatic.com https://www.youtube.com blob:; worker-src 'self' blob:; connect-src 'self'; object-src 'none'; frame-ancestors 'self'

[Drake97]

From a linux command line, what is the output of this command?

Code:

curl -X HEAD -I https://jellyfin.domain.tld

Replace the URL with your actual address.  It should look something like this.

Code:

HTTP/2 302
server: nginx/1.26.2
date: Fri, 13 Dec 2024 19:26:11 GMT
location: web/
strict-transport-security: max-age=63072000
x-xss-protection: 0
x-content-type-options: nosniff
last-modified: Friday, 13-Dec-2024 19:26:11 GMT
cache-control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
permissions-policy: accelerometer=(), ambient-light-sensor=(), battery=(), bluetooth=(), camera=(), clipboard-read=(), display-capture=(), document-domain=(), encrypted-media=(), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), payment=(), publickey-credentials-get=(), serial=(), sync-xhr=(), usb=(), xr-spatial-tracking=()
origin-agent-cluster: ?1
content-security-policy: default-src https: data: blob: ; img-src 'self' https://* ; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline' https://www.gstatic.com https://www.youtube.com blob:; worker-src 'self' blob:; connect-src 'self'; object-src 'none'; frame-ancestors 'self'

I run the command logging into my own server (ubuntu) and it remains thought a life, I tried with https://MYDOMAIN and with MYDOMAIN/ and it doesn't load anything, is it normal ?

PD: it loads something right now after 5 minutes almost

https://i.imgur.com/N7F1jhm.png

[TheDreadPirate]

If you're running curl from the same server running caddy, you can try

Code:

curl -X HEAD -I https://localhost

[Drake97]

If you're running curl from the same server running caddy, you can try

Code:

curl -X HEAD -I https://localhost

the command show me this

[Drake97]

If you're running curl from the same server running caddy, you can try

Code:

curl -X HEAD -I https://localhost

I connected from my phone with mobile data (obviously out of my network) and when I launched the command I got this:

[TheDreadPirate]

Code:

x-frame-options: SAMEORIGIN

This is the problem. Add this to your caddyfile.

Code:

header -X-Frame-Options {
    defer
}

The whole thing would look like this.

Code:

example.com {
    header -X-Frame-Options {
    defer
    }
    reverse_proxy 127.0.0.1:8096
}

[Drake97]

Code:

x-frame-options: SAMEORIGIN

This is the problem.  Add this to your caddyfile.

Code:

header -X-Frame-Options {
defer
}

The whole thing would look like this.

Code:

example.com {
    header -X-Frame-Options {
defer
    }
    reverse_proxy 127.0.0.1:8096
}

my original caddyfile had this, it was a couple of configs to save logs, plus enable the SAMEORIGIN to be able to display the featured-content-bar of my man Ted where he details that in order to be seen in all devices, it should be modified in this way:



OLD CADDYFILE:



now I deleted it and left it as you mention, like this:



I will tell my niece to try again on her LG TV and I will let you know how it goes, thank you very much.

[TheDreadPirate]

The "SAMEORIGIN" head is problematic specifically for WebOS. But only if you use the WebOS app. If you used the web browser in WebOS, SAMEORIGIN would not be a problem.

[Drake97]

The "SAMEORIGIN" head is problematic specifically for WebOS.  But only if you use the WebOS app.  If you used the web browser in WebOS, SAMEORIGIN would not be a problem.

I have arrived, sorry for the late reply.
With the modification you gave me of my caddyfile, no more problems on LG TVs, even without having activated SAMEORIGIN, all devices still see the featured-content-bar what I find strange, but well, everything contributes and are pure good news.
Thank you very much as always