Can't access Watcher via FQDN? about watcher

[Felix83000]

Can you show your .env file please?

[Felix83000]

Please look this issue: #8

[Felix83000]

After changing the file you need to do this:

• docker-compose down

• docker-compose up

[xme]

# Time Zone
TZ=Europe/Brussels

# SECURITY WARNING: In production please put DJANGO_DEBUG environment variable to False
DJANGO_DEBUG=False

# SECURITY WARNING: keep the secret key used in production secret!
# use 'openssl rand -base64 33' to generate
DJANGO_SECRET_KEY=xxxxxxxxxxx

# In case of "Bad Request" Error when accessing Watcher web interface.
# Fill this variable with your Watcher Server Instance IP.
# It is limited to a single IP address. Please use this syntax: ALLOWED_HOST=X.X.X.X
ALLOWED_HOST=192.168.240.10

# DJANGO EMAIL CONFIGURATION
EMAIL_FROM=xxxxx
SMTP_SERVER=xxxxxxx
WATCHER_URL=https://xxxxxx

# THE HIVE SETUP
THE_HIVE_URL=https://xxxxxxx
THE_HIVE_KEY=xxxxxxxx
THE_HIVE_CASE_ASSIGNEE=xavier

# MISP Setup
MISP_URL=https://xxxxxxxx
MISP_VERIFY_SSL=False
MISP_KEY=xxxxxxxxx
# Optional
MISP_TICKETING_URL=

# LDAP Setup
AUTH_LDAP_SERVER_URI=
AUTH_LDAP_BIND_DN=
AUTH_LDAP_BIND_PASSWORD=
AUTH_LDAP_BASE_DN=
AUTH_LDAP_FILTER=(uid=%(user)s)

# Searx Setup
SEARX_HOSTNAME=10.10.10.3:8080
SEARX_PROTOCOL=http://

# automaticaly update settings to the new version
# comment this line if you made / will make some modifications to the settings
SEARX_COMMAND=-f

# If you have a proxy, please fill these variables
HTTP_PROXY=
HTTPS_PROXY=

[Felix83000]

The configuration seems okay...

Please do this:

• Set DJANGO_DEBUG to True

• docker-compose down

• docker-compose up

• Try to access Watcher via FQDN and upload a screenshot here.

Thx

[xme]

[Felix83000]

Okay, so as you can see ALLOWED_HOST variable is set to 192.168.240.10.

So you need to add the IP value that you have hidden "You may need to add X.X.X.X to ALLOWED_HOST"

[xme]

But the hidden value is my FQDN... That's why I don't understand ;-)
Sorry, I had to mention this immediately

[Felix83000]

The condition to be satisfied is that the host header (or X-Forwarded-Host if USE_X_FORWARDED_HOST is enabled) should match one of the values in ALLOWED_HOSTS.

[Felix83000]

Try to put your FQDN instead.

[Felix83000]

Or you can do this: ALLOWED_HOST=* but it is less secure...

[xme]

It worked with the FQDN set as allowed_host!
Nope, no "*" ;-)
Tx!

[Felix83000]

I updated the documentation related to this issue: 42a632e