Pocket ID and Tailscale - NEED HELP

[Extra-Citron-7630]

My docker-compose.yaml file

services:
  tailscale:
    image: tailscale/tailscale:latest
    container_name: pocketid-tailscale
    hostname: pocketid
    environment:
      - TS_AUTHKEY=<omitted_for_security_reasons>
      - TS_STATE_DIR=/var/lib/tailscale
      - TS_USERSPACE=false
      - TS_ACCEPT_DNS=true
      - TS_EXTRA_ARGS=--accept-routes=true
      - TS_SERVE_CONFIG=/config/serve/serve.json
    volumes:
      - /mnt/cloud/container/pocketid/ts:/var/lib/tailscale
      - /mnt/cloud/container/pocketid/serve:/config/serve
    devices:
      - /dev/net/tun:/dev/net/tun
    cap_add:
      - net_admin
    restart: unless-stopped
  
pocket-id:
    container_name: pocketid-app
    image: ghcr.io/pocket-id/pocket-id:latest
    network_mode: service:tailscale
    environment:
      - ANALYTICS_DISABLED=true
      - ENCRYPTION_KEY=<omitted_for_security_reasons>
      - PUID=1000
      - PGID=1000
      - TZ=America/New_York
      - LOG_LEVEL=error
      - PORT=1411
      - LOG_JSON=true
      # - PUBLIC_APP_URL='https://pocketid.<omitted_for_security_reasons>.net'
      # - TRUST_PROXY=true
    restart: unless-stopped
    volumes:
      - /mnt/cloud/container/pocketid/data:/app/data

serve.json

{
  "TCP": {
    "443": {
      "HTTPS": true
    }
  },
  "Web": {
    "${TS_CERT_DOMAIN}:443": {
      "Handlers": {
        "/": {
          "Proxy": "http://127.0.0.1:1411"
        }
      }
    }
  }
}

I have a single debian server that has tailscale installed on it already. Due to one of the limitations of tailscale, I have decided to deploy Pocket ID with tailscale in a docker container so that I can add it as node on my tailnet. However whenever I access my pocketid.tailnet.net URL, I get the following error in the inspect element console:

[Error] SecurityError: The RP ID "localhost" is invalid for this domain

Any idea why I could be getting this?

[crypt0rr]

Heya, please un-comment # - PUBLIC_APP_URL='https://pocketid.<omitted_for_security_reasons>.net' and add your own FQDN in the placeholder.

[Extra-Citron-7630]

I have already tried that, not sure why I uncommented it, but both are uncommented in my compose:

• PUBLIC_APP_URL='https://pocketid.<omitted_for_security_reasons>.net'
• TRUST_PROXY=true

[crypt0rr]

I have already tried that, not sure why I uncommented it, but both are uncommented in my compose:

* PUBLIC_APP_URL='https://pocketid.<omitted_for_security_reasons>.net'

* TRUST_PROXY=true

I assume you've replaced the <omitted_for_security_reasons> part with your Tailscale domain? E.g. https://pocketid.dolphin-triceratops.ts.net?

[Extra-Citron-7630]

Yes I have

[crypt0rr]

@Extra-Citron-7630 Opened a PR (#189) to fix the issue, it is related to the new standard Pocket-ID is adopting in v2. You may check the updated template in the PR or wait till it gets merged (should be soon).

[crypt0rr]

@Extra-Citron-7630 Merged! https://github.com/2Tiny2Scale/ScaleTail/tree/main/services/pocket-id

[Extra-Citron-7630]

What is changed between the compose file I have and the changes that you pushed? Is this now fixed?

[crypt0rr]

Please recreate the service with the current configuration from the repository, advise is to remove what you currently have instead of checking line for line.

Stay in line with what is made available here and you are good to go!

[Extra-Citron-7630]

Ok I will deploy this on my server and update you with the results 🙂, thanks

[Extra-Citron-7630]

It worked, not sure what changed but its working now. Thanks