Let me preface all of this with admitting I am pretty much a complete newbie.

 

I am looking for a swag config file for Paperless-ngx. I am able to get to the page for login through my domain, but when I log in I get the error...

 

Forbidden (403)

CSRF verification failed. Request aborted.

More information is available with DEBUG=True.

 

I have no idea what this means.

Thanks in advance!

Having the same problem...

I added these variables in the unraid container template

SESSION_COOKIE_SECURE=true Ensures session cookies are only sent over HTTPS.

CSRF_COOKIE_SECURE=true Ensures CSRF cookies are only sent over HTTPS.

PAPERLESS_CSRF_TRUSTED_ORIGINS=https://paperless-ngx.xxxxx.xx,http://yourip:port

it all seems to have worked no issues.

Same issue in 2025. I fixed it by adding the variable PAPERLESS_CSRF_TRUSTED_ORIGINS in the Unraid paperless docker container settings. I set it equal to the URL which I am using to access paperless. See reference here https://docs.paperless-ngx.com/configuration/#PAPERLESS_CSRF_TRUSTED_ORIGINS

On 12/8/2025 at 6:05 AM, LegendaryFox said:

Same issue in 2025. I fixed it by adding the variable PAPERLESS_CSRF_TRUSTED_ORIGINS in the Unraid paperless docker container settings. I set it equal to the URL which I am using to access paperless. See reference here https://docs.paperless-ngx.com/configuration/#PAPERLESS_CSRF_TRUSTED_ORIGINS

Yes, that did it. Stuggled for a while until I got to your post. Much appreciated. Have a good one.

On 12/8/2025 at 6:05 AM, LegendaryFox said:

Same issue in 2025. I fixed it by adding the variable PAPERLESS_CSRF_TRUSTED_ORIGINS in the Unraid paperless docker container settings. I set it equal to the URL which I am using to access paperless. See reference here https://docs.paperless-ngx.com/configuration/#PAPERLESS_CSRF_TRUSTED_ORIGINS

Hero!