downstream 502 with authentik, but all other services are working fine. #1067

New Issue

MrUnknownDE · 2026-04-05T18:12:00+02:00

MrUnknownDE commented

2026-04-05 18:12:00 +02:00

Originally created by @StefanSa on 8/14/2025

Hi there,
First of all, thank you for this helpful tool.
I have published a few services with pangolin and haven't encountered any problems.
However, with authentik, i get a downstream 502 error after a few clicks on the login window.

{"ClientAddr":"213.xxx.xxx.xxx:59702","ClientHost":"213.xxx.xxx.xxx","DownstreamContentSize":11,"DownstreamStatus":502,"Duration":103274559,"RequestMethod":"GET","RequestPath":"/ws/client/","RequestProtocol":"HTTP/1.1","RetryAttempts":0,"ServiceName":"8-service@http","StartUTC":"2025-08-14T09:23:50.850451708Z","TLSCipher":"TLS_AES_128_GCM_SHA256","TLSVersion":"1.3","downstream_Content-Type":"","level":"info","msg":"","origin_Content-Type":"","request_Cookie":"REDACTED","request_User-Agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0","request_X-Forwarded-Proto":"wss","request_X-Real-Ip":"213.xxx.xxx.xxx","time":"2025-08-14T09:23:50Z"}

Interestingly, i don't have any problems with authentik when it runs on the same host (VPS) as pangolin, i.e., the local site.
Authentik is generally accessible on the home network and works without any problems.
Does anyone understand why pangolin (traefik) has such problems with authentik through the tunnel?
The authentic log file does not contain any information regarding this issue.

Thanks for any help.

*Originally created by @StefanSa on 8/14/2025* Hi there, First of all, thank you for this helpful tool. I have published a few services with pangolin and haven't encountered any problems. However, with authentik, i get a downstream 502 error after a few clicks on the login window. ``` {"ClientAddr":"213.xxx.xxx.xxx:59702","ClientHost":"213.xxx.xxx.xxx","DownstreamContentSize":11,"DownstreamStatus":502,"Duration":103274559,"RequestMethod":"GET","RequestPath":"/ws/client/","RequestProtocol":"HTTP/1.1","RetryAttempts":0,"ServiceName":"8-service@http","StartUTC":"2025-08-14T09:23:50.850451708Z","TLSCipher":"TLS_AES_128_GCM_SHA256","TLSVersion":"1.3","downstream_Content-Type":"","level":"info","msg":"","origin_Content-Type":"","request_Cookie":"REDACTED","request_User-Agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0","request_X-Forwarded-Proto":"wss","request_X-Real-Ip":"213.xxx.xxx.xxx","time":"2025-08-14T09:23:50Z"} ``` Interestingly, i don't have any problems with authentik when it runs on the same host (VPS) as pangolin, i.e., the local site. Authentik is generally accessible on the home network and works without any problems. Does anyone understand why pangolin (traefik) has such problems with authentik through the tunnel? The authentic log file does not contain any information regarding this issue. Thanks for any help.

MrUnknownDE closed this issue

2026-04-05 18:12:00 +02:00

Sign in to join this conversation.

Branches Tags

main

dev

dependabot/npm_and_yarn/dev-minor-updates-b4e5d6b9c5

revert-2766-feature/systemd-install-instructions

dependabot/npm_and_yarn/prod-patch-updates-05702d39f2

dependabot/npm_and_yarn/next-16.2.1

dependabot/npm_and_yarn/recharts-3.8.1

alerting-rules

private-site-ha

dependabot/docker/docker/library/node-25-slim

ssh

delete-account

msg-delivery

org-only-idp

cicd

patch

site-targets-auto-login

No Label

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: github/pangolin#1067