Docker build behind a bare metal NGINX proxy

[gllmhyt]

I'm trying to deploy PodFetch on my server without luck at the moment. My setup is the following:

Working directory is /srv/podfetch, podfetch user and group with 991:990 UID:GID. I created the user and its directory with the following command on Debian Trixie, then made sure the home folder has the podfetch:podfetch ownership.

useradd --system --shell /bin/bash --user-group --groups docker --add-subids-for-system --create-home --home-dir /srv/podfetch podfetch

docker-compose is the following:

services:
  podfetch:
    image: samuel19982/podfetch:latest
    user: "991:990"
    environment:
      - POLLING_INTERVAL=300
      - SERVER_URL=https://pod.domain.name/
      - PODFETCH_PROXY=http://localhost:8000/
      - DATABASE_URL=sqlite:///app/db/podcast.db
#      - S3_URL=https://region.objectstorage.domain
#      - S3_REGION=region
#      - S3_ACCESS_KEY=s3key
#      - S3_SECRET_KEY=s3secret
#      - S3_PROFILE=bucket-podfetch
      - BASIC_AUTH=true
      - USERNAME=username
      - PASSWORD=password
    volumes:
      - /srv/podfetch/podcasts:/app/podcasts
      - /srv/podfetch/db:/app/db
    ports:
      - 8000:8000

I have the goal to make it work with an S3 bucket but at the moment even the local storage is not working.

Nginx site config is the following:

map $http_upgrade $connection_upgrade {
        default upgrade;
        ''      close;
}

server {
   listen 80;
   listen [::]:80;
   server_name pod.domain.name;
   location / {
       return 301 https://$host$request_uri;
   }
}

server {
   listen      443 ssl;
   listen [::]:443 ssl;
   http2 on;
   server_name pod.domain.name;

   include snippets/certbot.conf;

   location / {
      proxy_pass http://127.0.0.1:8000;
      proxy_http_version 1.1;
      proxy_set_header Upgrade $http_upgrade;
      proxy_set_header Connection $connection_upgrade;
   }
}

When I add an URL to the database I get the following error:

Debug file located at /home/rust/src/target/x86_64-unknown-linux-musl/release/build/podfetch-9169eef7a8d0829c/out/built.rs

  ____           _ _____    _       _
 |  _ \ ___   __| |  ___|__| |_ ___| |__
 | |_) / _ \ / _` | |_ / _ \ __/ __| '_ \
 |  __/ (_) | (_| |  _|  __/ || (__| | | |
 |_|   \___/ \__,_|_|  \___|\__\___|_| |_|




2025-09-10T08:24:23 ℹ️ - Starting with the following environment variables:
2025-09-10T08:24:23 ℹ️ - Public server url: https://pod.domain.name/
2025-09-10T08:24:23 ℹ️ - Polling interval for new episodes: 300 minutes
2025-09-10T08:24:23 ℹ️ - Developer specifications available at https://pod.domain.name/swagger-ui/index.html#/
2025-09-10T08:24:23 ℹ️ - GPodder integration enabled: false
2025-09-10T08:24:23 ℹ️ - Podindex API key&secret configured: false


2025-09-10T08:24:23 ℹ️ - Settings already present
2025-09-10T08:24:27 ℹ️ - Socket connected to main room
2025-09-10T08:24:30 ℹ️ - Socket connected to main room
2025-09-10T08:24:38 ❌ - Error during reqwest: error sending request for url (https://silca.cc/en-eu/blogs/marginalgains)
2025-09-10T08:24:38 ⚠️ - Warning Bad Request: Error requesting resource from server:    0: <podfetch::utils::error::CustomError as core::convert::From<podfetch::utils::error::CustomErrorInner>>::from
             at /home/rust/src/src/utils/error.rs:43:34
   1: <T as core::convert::Into<U>>::into
             at /rustc/17067e9ac6d7ecb70e50f92c1944e545188d2359/library/core/src/convert/mod.rs:761:9
   2: podfetch::utils::error::map_reqwest_error
             at /home/rust/src/src/utils/error.rs:309:6
   3: core::ops::function::FnOnce::call_once
             at /rustc/17067e9ac6d7ecb70e50f92c1944e545188d2359/library/core/src/ops/function.rs:250:5
   4: core::result::Result<T,E>::map_err
             at /rustc/17067e9ac6d7ecb70e50f92c1944e545188d2359/library/core/src/result.rs:856:27
   5: podfetch::controllers::podcast_controller::add_podcast_by_feed::{{closure}}
             at /home/rust/src/src/controllers/podcast_controller.rs:293:18
   6: <F as axum::handler::Handler<(M,T1,T2),S>>::call::{{closure}}
             at /usr/local/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/axum-0.8.4/src/handler/mod.rs:239:43
   7: <core::pin::Pin<P> as core::future::future::Future>::poll
             at /rustc/17067e9ac6d7ecb70e50f92c1944e545188d2359/library/core/src/future/future.rs:124:9
   8: <futures_util::future::future::map::Map<Fut,F> as core::future::future::Future>::poll
             at /usr/local/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/futures-util-0.3.31/src/future/future/map.rs:55:37
   9: <futures_util::future::future::Map<Fut,F> as core::future::future::Future>::poll
             at /usr/local/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/futures-util-0.3.31/src/lib.rs:86:13
  10: <axum::handler::future::IntoServiceFuture<F> as core::future::future::Future>::poll
             at /usr/local/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/axum-0.8.4/src/macros.rs:42:17
  11: <axum::util::MapIntoResponseFuture<F> as core::future::future::Future>::poll
             at /usr/local/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/axum-0.8.4/src/util.rs:94:26
  12: <core::pin::Pin<P> as core::future::future::Future>::poll
             at /rustc/17067e9ac6d7ecb70e50f92c1944e545188d2359/library/core/src/future/future.rs:124:9
  13: <tower::util::oneshot::Oneshot<S,Req> as core::future::future::Future>::poll
             at /usr/local/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/tower-0.5.2/src/util/oneshot.rs:97:38
  14: <axum::routing::route::RouteFuture<E> as core::future::future::Future>::poll
             at /usr/local/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/axum-0.8.4/src/routing/route.rs:149:30
  15: <axum::util::MapIntoResponseFuture<F> as core::future::future::Future>::poll
             at /usr/local/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/axum-0.8.4/src/util.rs:94:26
  16: <core::pin::Pin<P> as core::future::future::Future>::poll
             at /rustc/17067e9ac6d7ecb70e50f92c1944e545188d2359/library/core/src/future/future.rs:124:9
  17: axum::middleware::from_fn::Next::run::{{closure}}
             at /usr/local/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/axum-0.8.4/src/middleware/from_fn.rs:345:36
  18: podfetch::auth_middleware::handle_basic_auth::{{closure}}
             at /home/rust/src/src/auth_middleware.rs:33:26
  19: <axum::middleware::from_fn::FromFn<F,S,I,(T1,)> as tower_service::Service<http::request::Request<axum_core::body::Body>>>::call::{{closure}}
             at /usr/local/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/axum-0.8.4/src/middleware/from_fn.rs:309:45
  20: <axum::middleware::from_fn::ResponseFuture as core::future::future::Future>::poll
  21: <F as futures_core::future::TryFuture>::try_poll
             at /usr/local/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/futures-core-0.3.31/src/future.rs:92:9
  22: <futures_util::future::try_future::into_future::IntoFuture<Fut> as core::future::future::Future>::poll
             at /usr/local/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/futures-util-0.3.31/src/future/try_future/into_future.rs:34:9
  23: <futures_util::future::future::map::Map<Fut,F> as core::future::future::Future>::poll
             at /usr/local/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/futures-util-0.3.31/src/future/future/map.rs:55:37
  24: <futures_util::future::future::Map<Fut,F> as core::future::future::Future>::poll
             at /usr/local/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/futures-util-0.3.31/src/lib.rs:86:13
  25: <futures_util::future::try_future::MapErr<Fut,F> as core::future::future::Future>::poll
             at /usr/local/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/futures-util-0.3.31/src/lib.rs:86:13
  26: <tower::util::map_err::MapErrFuture<F,N> as core::future::future::Future>::poll
             at /usr/local/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/tower-0.5.2/src/macros.rs:38:17
  27: <axum::util::MapIntoResponseFuture<F> as core::future::future::Future>::poll
             at /usr/local/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/axum-0.8.4/src/util.rs:94:26
  28: <core::pin::Pin<P> as core::future::future::Future>::poll
             at /rustc/17067e9ac6d7ecb70e50f92c1944e545188d2359/library/core/src/future/future.rs:124:9
  29: <tower::util::oneshot::Oneshot<S,Req> as core::future::future::Future>::poll
             at /usr/local/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/tower-0.5.2/src/util/oneshot.rs:97:38
  30: <axum::routing::route::RouteFuture<E> as core::future::future::Future>::poll
             at /usr/local/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/axum-0.8.4/src/routing/route.rs:149:30
  31: <F as futures_core::future::TryFuture>::try_poll
             at /usr/local/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/futures-core-0.3.31/src/future.rs:92:9
  32: <futures_util::future::try_future::into_future::IntoFuture<Fut> as core::future::future::Future>::poll
             at /usr/local/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/futures-util-0.3.31/src/future/try_future/into_future.rs:34:9
  33: <futures_util::future::future::map::Map<Fut,F> as core::future::future::Future>::poll
             at /usr/local/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/futures-util-0.3.31/src/future/future/map.rs:55:37
  34: <futures_util::future::future::Map<Fut,F> as core::future::future::Future>::poll
             at /usr/local/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/futures-util-0.3.31/src/lib.rs:86:13
  35: <futures_util::future::try_future::MapErr<Fut,F> as core::future::future::Future>::poll
             at /usr/local/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/futures-util-0.3.31/src/lib.rs:86:13
  36: <tower::util::map_err::MapErrFuture<F,N> as core::future::future::Future>::poll
             at /usr/local/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/tower-0.5.2/src/macros.rs:38:17
  37: <axum::util::MapIntoResponseFuture<F> as core::future::future::Future>::poll
             at /usr/local/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/axum-0.8.4/src/util.rs:94:26
  38: <core::pin::Pin<P> as core::future::future::Future>::poll
             at /rustc/17067e9ac6d7ecb70e50f92c1944e545188d2359/library/core/src/future/future.rs:124:9
  39: <tower::util::oneshot::Oneshot<S,Req> as core::future::future::Future>::poll
             at /usr/local/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/tower-0.5.2/src/util/oneshot.rs:97:38
  40: <axum::routing::route::RouteFuture<E> as core::future::future::Future>::poll
             at /usr/local/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/axum-0.8.4/src/routing/route.rs:149:30
  41: <engineioxide::service::futures::ResponseFuture<F,ResBody> as core::future::future::Future>::poll
             at /usr/local/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/engineioxide-0.17.0/src/service/futures.rs:55:53
  42: <F as futures_core::future::TryFuture>::try_poll
             at /usr/local/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/futures-core-0.3.31/src/future.rs:92:9
  43: <futures_util::future::try_future::into_future::IntoFuture<Fut> as core::future::future::Future>::poll
             at /usr/local/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/futures-util-0.3.31/src/future/try_future/into_future.rs:34:9
  44: <futures_util::future::future::map::Map<Fut,F> as core::future::future::Future>::poll
             at /usr/local/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/futures-util-0.3.31/src/future/future/map.rs:55:37
  45: <futures_util::future::future::Map<Fut,F> as core::future::future::Future>::poll
             at /usr/local/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/futures-util-0.3.31/src/lib.rs:86:13
  46: <futures_util::future::try_future::MapErr<Fut,F> as core::future::future::Future>::poll
             at /usr/local/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/futures-util-0.3.31/src/lib.rs:86:13
  47: <tower::util::map_err::MapErrFuture<F,N> as core::future::future::Future>::poll
             at /usr/local/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/tower-0.5.2/src/macros.rs:38:17
  48: <axum::util::MapIntoResponseFuture<F> as core::future::future::Future>::poll
             at /usr/local/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/axum-0.8.4/src/util.rs:94:26
  49: <core::pin::Pin<P> as core::future::future::Future>::poll
             at /rustc/17067e9ac6d7ecb70e50f92c1944e545188d2359/library/core/src/future/future.rs:124:9
  50: <tower::util::oneshot::Oneshot<S,Req> as core::future::future::Future>::poll
             at /usr/local/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/tower-0.5.2/src/util/oneshot.rs:97:38
  51: <axum::routing::route::RouteFuture<E> as core::future::future::Future>::poll
             at /usr/local/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/axum-0.8.4/src/routing/route.rs:149:30
  52: <hyper_util::service::oneshot::Oneshot<S,Req> as core::future::future::Future>::poll
             at /usr/local/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/hyper-util-0.1.13/src/service/oneshot.rs:55:38
  53: <hyper_util::service::glue::TowerToHyperServiceFuture<S,R> as core::future::future::Future>::poll
             at /usr/local/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/hyper-util-0.1.13/src/service/glue.rs:70:9
  54: <hyper::proto::h1::dispatch::Server<S,hyper::body::incoming::Incoming> as hyper::proto::h1::dispatch::Dispatch>::poll_msg
             at /usr/local/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/hyper-1.6.0/src/proto/h1/dispatch.rs:538:35
  55: hyper::proto::h1::dispatch::Dispatcher<D,Bs,I,T>::poll_write
             at /usr/local/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/hyper-1.6.0/src/proto/h1/dispatch.rs:336:43
  56: hyper::proto::h1::dispatch::Dispatcher<D,Bs,I,T>::poll_loop
             at /usr/local/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/hyper-1.6.0/src/proto/h1/dispatch.rs:173:21
  57: hyper::proto::h1::dispatch::Dispatcher<D,Bs,I,T>::poll_inner
             at /usr/local/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/hyper-1.6.0/src/proto/h1/dispatch.rs:149:16
  58: hyper::proto::h1::dispatch::Dispatcher<D,Bs,I,T>::poll_catch
             at /usr/local/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/hyper-1.6.0/src/proto/h1/dispatch.rs:128:28
  59: <hyper::proto::h1::dispatch::Dispatcher<D,Bs,I,T> as core::future::future::Future>::poll
             at /usr/local/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/hyper-1.6.0/src/proto/h1/dispatch.rs:471:9
  60: <hyper::server::conn::http1::UpgradeableConnection<I,S> as core::future::future::Future>::poll
             at /usr/local/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/hyper-1.6.0/src/server/conn/http1.rs:530:51
  61: <hyper_util::server::conn::auto::UpgradeableConnection<I,S,E> as core::future::future::Future>::poll
             at /usr/local/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/hyper-util-0.1.13/src/server/conn/auto/mod.rs:645:28
  62: <core::pin::Pin<P> as core::future::future::Future>::poll
             at /rustc/17067e9ac6d7ecb70e50f92c1944e545188d2359/library/core/src/future/future.rs:124:9
  63: axum::serve::handle_connection::{{closure}}::{{closure}}::{{closure}}
             at /usr/local/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/tokio-1.47.0/src/macros/select.rs:708:49
  64: <core::future::poll_fn::PollFn<F> as core::future::future::Future>::poll
             at /rustc/17067e9ac6d7ecb70e50f92c1944e545188d2359/library/core/src/future/poll_fn.rs:151:9
  65: axum::serve::handle_connection::{{closure}}::{{closure}}
             at /usr/local/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/axum-0.8.4/src/serve/mod.rs:400:13
  66: tokio::runtime::task::core::Core<T,S>::poll::{{closure}}
             at /usr/local/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/tokio-1.47.0/src/runtime/task/core.rs:365:17
  67: tokio::loom::std::unsafe_cell::UnsafeCell<T>::with_mut
             at /usr/local/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/tokio-1.47.0/src/loom/std/unsafe_cell.rs:16:9
  68: tokio::runtime::task::core::Core<T,S>::poll
             at /usr/local/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/tokio-1.47.0/src/runtime/task/core.rs:354:30
  69: tokio::runtime::task::harness::poll_future::{{closure}}
             at /usr/local/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/tokio-1.47.0/src/runtime/task/harness.rs:535:19
  70: <core::panic::unwind_safe::AssertUnwindSafe<F> as core::ops::function::FnOnce<()>>::call_once
             at /rustc/17067e9ac6d7ecb70e50f92c1944e545188d2359/library/core/src/panic/unwind_safe.rs:272:9
  71: std::panicking::try::do_call
             at /rustc/17067e9ac6d7ecb70e50f92c1944e545188d2359/library/std/src/panicking.rs:589:40
  72: std::panicking::try
             at /rustc/17067e9ac6d7ecb70e50f92c1944e545188d2359/library/std/src/panicking.rs:552:19
  73: std::panic::catch_unwind
             at /rustc/17067e9ac6d7ecb70e50f92c1944e545188d2359/library/std/src/panic.rs:359:14
  74: tokio::runtime::task::harness::poll_future
             at /usr/local/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/tokio-1.47.0/src/runtime/task/harness.rs:523:18
  75: tokio::runtime::task::harness::Harness<T,S>::poll_inner
             at /usr/local/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/tokio-1.47.0/src/runtime/task/harness.rs:210:27
  76: tokio::runtime::task::harness::Harness<T,S>::poll
             at /usr/local/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/tokio-1.47.0/src/runtime/task/harness.rs:155:15
  77: tokio::runtime::task::raw::poll
             at /usr/local/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/tokio-1.47.0/src/runtime/task/raw.rs:325:5
  78: tokio::runtime::scheduler::multi_thread::worker::Context::run_task
  79: tokio::runtime::scheduler::multi_thread::worker::Context::run
  80: tokio::runtime::context::scoped::Scoped<T>::set
  81: tokio::runtime::context::runtime::enter_runtime
  82: tokio::runtime::scheduler::multi_thread::worker::run
  83: <tokio::runtime::blocking::task::BlockingTask<T> as core::future::future::Future>::poll
  84: tokio::runtime::task::core::Core<T,S>::poll
  85: tokio::runtime::task::harness::Harness<T,S>::poll
  86: tokio::runtime::blocking::pool::Inner::run
  87: std::sys::backtrace::__rust_begin_short_backtrace
  88: core::ops::function::FnOnce::call_once{{vtable.shim}}
  89: <alloc::boxed::Box<F,A> as core::ops::function::FnOnce<Args>>::call_once
             at /rustc/17067e9ac6d7ecb70e50f92c1944e545188d2359/library/alloc/src/boxed.rs:1966:9
  90: <alloc::boxed::Box<F,A> as core::ops::function::FnOnce<Args>>::call_once
             at /rustc/17067e9ac6d7ecb70e50f92c1944e545188d2359/library/alloc/src/boxed.rs:1966:9
  91: std::sys::pal::unix::thread::Thread::new::thread_start
             at /rustc/17067e9ac6d7ecb70e50f92c1944e545188d2359/library/std/src/sys/pal/unix/thread.rs:109:17
 with error

I'm sure it might be a configuration error but I struggle to understand fully the sparse documentation about running Podfetch behind a proxy.

[SamTV12345]

It looks like it can't get the podcast from the host. Do you have some firewall or something on the host? Maybe that is blocking the request from PodFetch to the podcast server?

[gllmhyt]

OK. I don't know if it's related but when I enable any kind of authentication, I am not presented the login page. o.O

[gllmhyt]

And I getting plethora of '⚠️ - Warning You are forbidden to access requested file.: 0: ' as expected because I didn't log in.

[SamTV12345]

If you have basic auth installed and you visit the normal path you are not redirected? It should go to /login with the credentials

[SamTV12345]

E.g. https://podfetch-no-auth.samtv.fyi/ui/ redirects to /ui/login

[gllmhyt]

Indeed it doesn't redirect.