ddm231

Hi everyone, has anyone successfully set up NetBird with Keycloak SSO and cloudflared as a reverse proxy on Unraid? I've followed all guides I could find (NetBird docs, Matrix/Synapse TURN, forum posts, etc.), but after logging in via Keycloak the NetBird dashboard always throws a "Request failed with status code 404" error. The login window from Keycloak appears as expected, authentication works, but after login the dashboard cannot load user or peer data. NetBird-Signal, NetBird-Management and NetBird-Dashboard containers are running on Unraid. Keycloak configuration (clients, scopes, redirects etc.) matches all tutorials cloudflared tunnel to my domain is up and working – I get the Keycloak login via my domain. I spent hours on this and am stuck – has anyone managed to get NetBird + Keycloak + cloudflared to work on Unraid, and can share their working config/routing or spot my mistake? Here are my templates. NetBird-Dashboard <?xml version="1.0"?> <Container version="2"> <Name>NetBird-Dashboard</Name> <Repository>netbirdio/dashboard</Repository> <Registry>https://hub.docker.com/r/wiretrustee/dashboard/</Registry> <Network>bridge</Network> <MyIP/> <Shell>bash</Shell> <Privileged>false</Privileged> <Support>https://forums.unraid.net/topic/133241-support-netbird/</Support> <Project>https://netbird.io</Project> <Overview>NetBird is an open-source VPN management platform built on top of WireGuard&#xAE; making it easy to create secure private networks for your organization or home.&#xD; &#xD; The Dashboard service provides a user friendly interface for management of peers and the overall network.&#xD; &#xD; Look at the "Additional Requirements" for the other two parts of the server stack.</Overview> <Category>Network:DNS Network:Management Network:VPN</Category> <WebUI/> <TemplateURL>https://raw.githubusercontent.com/dannymate/unraid-templates//tmp/GitHub/repositoryClone/dannymate/unraid-templates/netbird-dashboard/netbird-dashboard.xml</TemplateURL> <Icon>https://raw.githubusercontent.com/dannymate/unraid-templates/master/icons/netbird-dashboard-icon-256px.png</Icon> <ExtraParams/> <PostArgs/> <CPUset/> <DateInstalled>1754218464</DateInstalled> <DonateText/> <DonateLink/> <Requires>NetBird-Management&#xD; brNetBird-Signal</Requires> <Config Name="HTTP" Target="80" Default="" Mode="tcp" Description="" Type="Port" Display="always" Required="true" Mask="false">8089</Config> <Config Name="HTTPS" Target="443" Default="" Mode="tcp" Description="" Type="Port" Display="always" Required="true" Mask="false">7443</Config> <Config Name="AUTH_AUDIENCE" Target="AUTH_AUDIENCE" Default="" Mode="" Description="" Type="Variable" Display="always" Required="true" Mask="false">netbird-client</Config> <Config Name="AUTH_CLIENT_ID" Target="AUTH_CLIENT_ID" Default="" Mode="" Description="" Type="Variable" Display="always" Required="true" Mask="false">netbird-client</Config> <Config Name="AUTH_AUTHORITY" Target="AUTH_AUTHORITY" Default="" Mode="" Description="" Type="Variable" Display="always" Required="true" Mask="false">https://auth.mydomain.cloud/realms/netbird</Config> <Config Name="USE_AUTH0" Target="USE_AUTH0" Default="false" Mode="" Description="" Type="Variable" Display="always" Required="true" Mask="false">false</Config> <Config Name="AUTH_SUPPORTED_SCOPES" Target="AUTH_SUPPORTED_SCOPES" Default="openid profile email offline_access api" Mode="" Description="" Type="Variable" Display="always" Required="true" Mask="false">openid profile email offline_access</Config> <Config Name="NETBIRD_MGMT_API_ENDPOINT" Target="NETBIRD_MGMT_API_ENDPOINT" Default="" Mode="" Description="" Type="Variable" Display="always" Required="true" Mask="false">https://connect.mydomain.cloud</Config> <Config Name="NETBIRD_MGMT_GRPC_API_ENDPOINT" Target="NETBIRD_MGMT_GRPC_API_ENDPOINT" Default="" Mode="" Description="" Type="Variable" Display="always" Required="true" Mask="false">https://connect.mydomain.cloud</Config> <Config Name="AUTH_REDIRECT_URI" Target="AUTH_REDIRECT_URI" Default="" Mode="" Description="" Type="Variable" Display="advanced" Required="false" Mask="false"/> <Config Name="AUTH_SILENT_REDIRECT_URI" Target="AUTH_SILENT_REDIRECT_URI" Default="" Mode="" Description="" Type="Variable" Display="advanced" Required="false" Mask="false"/> <TailscaleStateDir/> </Container> NetBird-Management <?xml version="1.0"?> <Container version="2"> <Name>NetBird-Management</Name> <Repository>netbirdio/management</Repository> <Registry>https://hub.docker.com/r/netbirdio/management/</Registry> <Network>bridge</Network> <MyIP/> <Shell>sh</Shell> <Privileged>false</Privileged> <Support>https://forums.unraid.net/topic/133241-support-netbird/</Support> <Project>https://netbird.io</Project> <Overview>NetBird is an open-source VPN management platform built on top of WireGuard&#xAE; making it easy to create secure private networks for your organization or home.&#xD; &#xD; The Management service is the central coordination component for NetBird. It keeps the network state, public Wireguard keys of the peers, authenticates and distributes network changes to peers.&#xD; &#xD; Look at the "Additional Requirements" for the other two parts of the server stack.</Overview> <Category>Network:DNS Network:Management Network:VPN</Category> <WebUI/> <TemplateURL>https://raw.githubusercontent.com/dannymate/unraid-templates/master/netbird-management/netbird-management.xml</TemplateURL> <Icon>https://raw.githubusercontent.com/dannymate/unraid-templates/master/icons/netbird-management-icon-256px.png</Icon> <ExtraParams/> <PostArgs>--port 443 --log-file console --disable-anonymous-metrics=false --single-account-mode-domain=connect.mydomain.cloud --dns-domain=netbird.selfhosted</PostArgs> <CPUset/> <DateInstalled>1754218720</DateInstalled> <DonateText/> <DonateLink/> <Requires>NetBird-Dashboard&#xD; brNetBird-Signal</Requires> <Config Name="HTTPS" Target="443" Default="" Mode="tcp" Description="" Type="Port" Display="always" Required="true" Mask="false">33073</Config> <Config Name="Config" Target="/etc/netbird/management.json" Default="" Mode="rw" Description="" Type="Path" Display="always" Required="true" Mask="false">/mnt/appdata_cache/appdata/netbird-server/management/management.json</Config> <Config Name="Appdata" Target="/var/lib/netbird" Default="" Mode="rw" Description="" Type="Path" Display="always" Required="false" Mask="false">/mnt/appdata_cache/appdata/netbird-server/management/data</Config> <Config Name="TZ" Target="" Default="" Mode="" Description="" Type="Variable" Display="always" Required="false" Mask="false">Europe/Berlin</Config> <TailscaleStateDir/> </Container>Here is my mangement.json: { "Stuns": [ { "Proto": "udp", "URI": "stun:connect.mydomain.cloud:3478", "Username": "", "Password": null } ], "TURNConfig": { "Turns": [ { "Proto": "udp", "URI": "turn:connect.mydomain.cloud:3478", "Username": "username", "Password": "password" } ], "CredentialsTTL": "12h", "Secret": "hereismysecret", "TimeBasedCredentials": true }, "Signal": { "Proto": "https", "URI": "connect.mydomain.cloud:443", "Username": "", "Password": null }, "Datadir": "", "HttpConfig": { "Address": "0.0.0.0:33073", "AuthIssuer": "https://auth.mydomain.cloud/realms/netbird", "AuthAudience": "netbird-client", "AuthKeysLocation": "https://auth.mydomain.cloud/realms/netbird/protocol/openid-connect/certs", "OIDCConfigEndpoint":"https://auth.mydomain.cloud/realms/netbird/.well-known/openid-configuration" }, "IdpManagerConfig": { "Manager": "none" }, "DeviceAuthorizationFlow": { "Provider": "hosted", "ProviderConfig": { "Audience": "netbird-client", "Domain": "", "ClientID": "netbird-client", "TokenEndpoint": "https://auth.mydomain.cloud/realms/netbird/protocol/openid-connect/token", "DeviceAuthEndpoint": "https://auth.mydomain.cloud/realms/netbird/protocol/openid-connect/auth/device" } } } And this is my turnserver.conf: listening-port=3478 tls-listening-port=5349 listening-ip=0.0.0.0 min-port=49152 max-port=65535 realm=connect.mydomain.cloud server-name=connect.mydomain.cloud fingerprint lt-cred-mech use-auth-secret static-auth-secret=thisismysecret total-quota=100 bps-capacity=0 stale-nonce no-loopback-peers no-multicast-peers # Optional für TLS: # cert=/etc/coturn/cert.pem # pkey=/etc/coturn/private.key # Logging: syslog Any help or even working config examples would be much appreciated! Thanks a lot, Dominik