Multiple Issues - Need some guidance..

[Trembler34]

Debian 12, Docker, mostly managed with Portainer with NPM Proxy front end.. All works well from that standpoint.

A few issues I am having.

First issue, I am wondering why none of the ENV Variables I apply in Portainer are getting applied to the SFTPGo configuration? The only one that actually gets applied is the PORT 22 variable.. None of the others work.. Only way i can get these options to work is by manually configuring the .json which I would prefer not to do.

The other issue, during some testing by just using the .json config file when enabling the Allow List, it seems like its not doing anything. All IPs not specific still can access the instance.. Since this is behind NPM Proxy Manager, I enabled the Proxy config in the .json, also allowed the trusted IP of the proxy and the docker IP, and then added this into the custom config of the NPM Host to pass the real IP of the client. Once I enable the Proxy Protocol it breaks the instance, i get 502 bad gateway and my sftp over 22 no longer works.

proxy_set_header X-Real-IP $proxy_protocol_addr;

My goal here is to basically have this setup behind NPM, blocking ALL IPs, then just having an allow whitelist of the IP's we want to connect with defender enabled, allow list enabled, etc..

Any help is appreciated.. I've spent a good 4hrs on this today searching around, trying to figure it out with not much luck.

[fostermi]

The only thing I can tell you from my experience is to check your logs for the config loaded dictionary to make sure that it has the configuration you set via ENV vars. If not, check your container to make sure they are actually present when doing docker inspect. Also, check for misspellings or an improper variable name.

For your proxy config, verify your proxy is adding the PROXY header to the tcp connection by running tcpdump on the container to make sure that line exists in the stream. Example conversation snippet.

PROXY TCP4 128.138.131.13 128.138.131.20 59081 2022
SSH-2.0-SFTPGo_2.6.6
SSH-2.0-OpenSSH_9.9