[BUG] latest lnbits v0.12.5 » lnbits-reverse-proxy.conf doesn't allow topup and restart

[editwentyone]

inspecting with browser, console:

Request URL:
https://192.168.1.10:4003/admin/api/v1/restart/
Request Method:
GET
Status Code:
307 Temporary Redirect
Referrer Policy:
strict-origin-when-cross-origin

same goes for topup function

Request URL:
https://192.168.1.10:4003/admin/api/v1/topup/
Request Method:
PUT
Status Code:
307 Temporary Redirect
Referrer Policy:
strict-origin-when-cross-origin

my research tells me it has something to do with nginx reverse proxy, I already reinstalled nginx and reused the default conf from your guide, but I have no luck getting LNbits to work, everything lese is working with the reverse proxy setup.

if I open up LNbits :5000 port and use it directly through this port, I can topup and restart and control LNbits without issues.

any help is very much appreciated

[editwentyone]

xhr, strict-origin-when-cross-origin, 307 Temporary Redirect, (blocked:mixed-content)

bundle.min.js?v=1715611579:42

https://192.168.1.10:4003/admin/api/v1/topup/

[editwentyone]

finally after days of "WTF is NGINX doing" » I "fixed it", had to remove lnbits.conf from stream-enabled
and created lnbits.conf inside sites-enabled (ln -s from sites-available) with the following content

would be nice if someone could double check my stuff, total noob here

server {
    server_name lnbits.org;

    location / {
        proxy_pass http://127.0.0.1:5000;

    # Simple requests
    if ($request_method ~* "(GET|POST)") {
      add_header "Access-Control-Allow-Origin"  *;
    }

    # Preflighted requests
    if ($request_method = OPTIONS ) {
      add_header "Access-Control-Allow-Origin"  *;
      add_header "Access-Control-Allow-Methods" "GET, POST, OPTIONS, HEAD";
      add_header "Access-Control-Allow-Headers" "Authorization, Origin, X-Requested-With, Content-Type, Accept";
      return 200;
    }

}

    listen [::]:4003 ssl;
    listen 4003 ssl;
    ssl_certificate /etc/ssl/certs/nginx-selfsigned.crt;
    ssl_certificate_key /etc/ssl/private/nginx-selfsigned.key;
    ssl_session_timeout 4h;
    ssl_protocols TLSv1.3;
    ssl_prefer_server_ciphers on;
}

[editwentyone]

to connect from outside this is maybe also a nice addon: #1433