Unexpected redirection to Yunohost SSO when trying to reach various apps/URLs

Support apps
, ,
1

What app is this about, and its version: Wanderer 0.18.5~ynh1, Vaultwarden 1.35.8~ynh1
What YunoHost version are you running: 12.1.39
What type of hardware are you using: Virtual machine

Describe your issue

I’m running a homelab that includes two different Yunohost instances and several apps. Here’s the architecture of the homelab:

graph TD;
     Freebox --> Caddy
subgraph Hardware["HP Z2"]
subgraph Cluster["Proxmox"]
    Caddy --> Inner_2
        subgraph Inner_2["Yunohost_2"]
           wanderer_2
           Vaultwarden_2
           Seafile
        end
end
end
subgraph Cluster2["Raspberry Pi"]
    Caddy --> Inner_1
        subgraph Inner_1["Yunohost_1"]
            wanderer_1
            Vaultwarden_1
            Limesurvey
        end
end

Yunohost_1 has been installed for a while now. It is running as expected and I can reach all URLs and apps, including https://wanderer_1/admin/_/,without issue.

The Proxmox server and its VMs, including Yunohost_2, have been set up more recently. wanderer_2 and Seafile are accessible as expected, but not wanderer_2/admin/_/ nor Vaultwarden : the requests are automatically redirected towards Yunohost_2/yunohost/sso/.

I’ve checked the Caddyfile and the config of Yunohost_1 and Yunohost_1 are identical.

As far as I can tell, both instances have the same settings, so I’m not sure how to fix this.

Any input would be much appreciated, thank you! :slight_smile:

Share relevant logs or error messages

No specific log or error message

2

Did you try force-upgrading both apps to regenerate their nginx conf ?
Other thing I would check is yunohost tools regen-conf nginx --dry-run --with-diff and the wanderer and vaultwarden domain logs in the nginx service tab (webadmin>tools>services>nginx).

3

Hi!

A force-upgrade didn’t do anything visible, the issue is still there on both wanderer and Vaultwarden on Yunohost_2.

yunohost tools regen-conf nginx --dry-run --with-diff didn’t output anything.

Here are part of the logs that could be of interest, but I’m afraid it doesn’t say much. I’m intrigued by the Invalid signature warning on SSOwat.log and by the 302 mention on both apps logs, but maybe it’s just regular mentions?

/var/log/nginx/ssowat.log

[WARN  Wed Apr 29 10:13:49 2026] Logger: changing loglevel from DEBUG to INFO
[WARN  Wed Apr 29 10:13:50 2026] Logger: changing loglevel from DEBUG to INFO
[ERROR Wed Apr 29 10:14:11 2026] Invalid signature
[ERROR Wed Apr 29 10:14:15 2026] Invalid signature
[ERROR Wed Apr 29 10:14:50 2026] Invalid signature
[ERROR Wed Apr 29 10:16:18 2026] Invalid signature
[ERROR Wed Apr 29 10:16:18 2026] Invalid signature
[ERROR Wed Apr 29 10:16:22 2026] Invalid signature
[ERROR Wed Apr 29 10:16:26 2026] Invalid signature
[ERROR Wed Apr 29 10:16:49 2026] Invalid signature
[ERROR Wed Apr 29 10:17:02 2026] Invalid signature
[ERROR Wed Apr 29 10:18:03 2026] Invalid signature
[ERROR Wed Apr 29 10:19:00 2026] Invalid signature
[ERROR Wed Apr 29 10:20:15 2026] Invalid signature
[WARN  Wed Apr 29 10:36:44 2026] Logger: changing loglevel from DEBUG to INFO
[WARN  Wed Apr 29 10:36:48 2026] Logger: changing loglevel from DEBUG to INFO
[WARN  Wed Apr 29 10:44:44 2026] Logger: changing loglevel from DEBUG to INFO
[WARN  Wed Apr 29 10:44:44 2026] Logger: changing loglevel from DEBUG to INFO
[WARN  Wed Apr 29 10:49:43 2026] Logger: changing loglevel from DEBUG to INFO
[WARN  Wed Apr 29 10:49:47 2026] Logger: changing loglevel from DEBUG to INFO
[WARN  Wed Apr 29 10:50:19 2026] Logger: changing loglevel from DEBUG to INFO
[WARN  Wed Apr 29 10:50:19 2026] Logger: changing loglevel from DEBUG to INFO
[WARN  Wed Apr 29 10:53:58 2026] Logger: changing loglevel from DEBUG to INFO
[WARN  Wed Apr 29 10:56:42 2026] Logger: changing loglevel from DEBUG to INFO
[WARN  Wed Apr 29 11:01:35 2026] Logger: changing loglevel from DEBUG to INFO
[ERROR Wed Apr 29 11:12:40 2026] Invalid signature
[ERROR Wed Apr 29 11:14:51 2026] Invalid signature
[ERROR Wed Apr 29 11:14:53 2026] Invalid signature
[ERROR Wed Apr 29 11:15:27 2026] Invalid signature
[ERROR Wed Apr 29 11:15:43 2026] Invalid signature
[ERROR Wed Apr 29 11:15:45 2026] Invalid signature
[WARN  Wed Apr 29 11:16:01 2026] Logger: changing loglevel from DEBUG to INFO
[WARN  Wed Apr 29 11:20:01 2026] Logger: changing loglevel from DEBUG to INFO
[ERROR Wed Apr 29 11:20:59 2026] Invalid signature
[ERROR Wed Apr 29 11:48:04 2026] Invalid signature
[ERROR Wed Apr 29 11:50:28 2026] Invalid signature
[ERROR Wed Apr 29 11:50:29 2026] Invalid signature
[ERROR Wed Apr 29 11:50:49 2026] Invalid signature
[ERROR Wed Apr 29 11:50:52 2026] Invalid signature
[ERROR Wed Apr 29 11:51:03 2026] Invalid signature
[ERROR Wed Apr 29 11:51:04 2026] Invalid signature
[ERROR Wed Apr 29 12:55:15 2026] Invalid signature
[ERROR Wed Apr 29 12:55:28 2026] Invalid signature
[ERROR Wed Apr 29 12:55:41 2026] Invalid signature
[ERROR Wed Apr 29 12:57:37 2026] Invalid signature
[ERROR Wed Apr 29 12:57:41 2026] Invalid signature
[WARN  Wed Apr 29 14:47:20 2026] Logger: changing loglevel from DEBUG to INFO
[ERROR Wed Apr 29 14:57:31 2026] Invalid signature
[ERROR Wed Apr 29 14:57:41 2026] Invalid signature
[ERROR Wed Apr 29 15:05:20 2026] Invalid signature

/var/log/nginx/vaultwarden.domain-access.log

192.168.1.4 - - [29/Apr/2026:12:01:37 +0200] "GET / HTTP/2.0" 302 138 "-" "Mozilla/5.0 (Kubuntu; Linux i686; rv:123.0) Gecko/20100101 Firefox/123.0"
192.168.1.4 - - [29/Apr/2026:12:04:01 +0200] "GET / HTTP/2.0" 302 138 "http://coffre.beta.mapper.space" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.0.0 Safari/537.36"
192.168.1.4 - - [29/Apr/2026:12:04:01 +0200] "GET / HTTP/2.0" 302 138 "http://coffre.beta.mapper.space" "Mozilla/5.0 (Linux; Android 8.0.0; SM-G965U Build/R16NW) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.111 Mobile Safari/537.36"
192.168.1.4 - - [29/Apr/2026:12:10:49 +0200] "GET / HTTP/2.0" 302 138 "-" "Mozilla/5.0(WindowsNT10.0;WOW64)AppleWebKit/537.36(KHTML,likeGecko)Chrome/49.0.2623.22Safari/537.36SE2.XMetaSr1.0"
192.168.1.4 - - [29/Apr/2026:12:10:50 +0200] "GET / HTTP/2.0" 302 138 "-" "Mozilla/5.0 (Linux; Android 10; CLT-AL00 Build/HUAWEICLT-AL00; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/76.0.3809.89 Mobile Safari/537.36 T7/11.20 SP-engine/2.16.0 baiduboxapp/11.20.0.14 (Baidu; P1 10) NABar/1.0"
192.168.1.4 - - [29/Apr/2026:12:57:37 +0200] "GET /admin HTTP/2.0" 302 138 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:149.0) Gecko/20100101 Firefox/149.0"
192.168.1.4 - - [29/Apr/2026:12:57:41 +0200] "GET / HTTP/2.0" 302 138 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:149.0) Gecko/20100101 Firefox/149.0"
192.168.1.4 - - [29/Apr/2026:15:05:12 +0200] "GET / HTTP/2.0" 302 138 "-" "Mozilla/5.0 (X11; Linux i686; rv:109.0) Gecko/20100101 Firefox/120.0"

/var/log/nginx/wanderer.domain-access.log

192.168.1.4 - - [29/Apr/2026:12:55:15 +0200] "GET /admin/_/ HTTP/2.0" 302 138 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:149.0) Gecko/20100101 Firefox/149.0"
192.168.1.4 - - [29/Apr/2026:12:55:28 +0200] "GET /admin/_/ HTTP/2.0" 302 138 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:149.0) Gecko/20100101 Firefox/149.0"
192.168.1.4 - - [29/Apr/2026:12:55:41 +0200] "GET /admin/_/ HTTP/2.0" 302 138 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:149.0) Gecko/20100101 Firefox/149.0"
192.168.1.4 - - [29/Apr/2026:14:57:31 +0200] "GET /admin/_/ HTTP/2.0" 302 138 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:149.0) Gecko/20100101 Firefox/149.0"
192.168.1.4 - - [29/Apr/2026:14:57:41 +0200] "GET /admin/_/ HTTP/2.0" 302 138 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:149.0) Gecko/20100101 Firefox/149.0"
192.168.1.4 - - [29/Apr/2026:15:05:20 +0200] "GET /admin/_/ HTTP/2.0" 302 138 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:149.0) Gecko/20100101 Firefox/149.0"
4

Hi!

A force-upgrade didn’t do anything visible, the issue is still there on both wanderer and Vaultwarden on Yunohost_2.

yunohost tools regen-conf nginx --dry-run --with-diff didn’t output anything.

Here are part of the logs that could be of interest, but I’m afraid it doesn’t say much. I’m intrigued by the Invalid signature warning on SSOwat.log and by the 302 mention on both apps logs, but maybe it’s just regular mentions?

/var/log/nginx/ssowat.log

[WARN  Wed Apr 29 10:13:49 2026] Logger: changing loglevel from DEBUG to INFO
[WARN  Wed Apr 29 10:13:50 2026] Logger: changing loglevel from DEBUG to INFO
[ERROR Wed Apr 29 10:14:11 2026] Invalid signature
[ERROR Wed Apr 29 10:14:15 2026] Invalid signature
[ERROR Wed Apr 29 10:14:50 2026] Invalid signature
[ERROR Wed Apr 29 10:16:18 2026] Invalid signature
[ERROR Wed Apr 29 10:16:18 2026] Invalid signature
[ERROR Wed Apr 29 10:16:22 2026] Invalid signature
[ERROR Wed Apr 29 10:16:26 2026] Invalid signature
[ERROR Wed Apr 29 10:16:49 2026] Invalid signature
[ERROR Wed Apr 29 10:17:02 2026] Invalid signature
[ERROR Wed Apr 29 10:18:03 2026] Invalid signature
[ERROR Wed Apr 29 10:19:00 2026] Invalid signature
[ERROR Wed Apr 29 10:20:15 2026] Invalid signature
[WARN  Wed Apr 29 10:36:44 2026] Logger: changing loglevel from DEBUG to INFO
[WARN  Wed Apr 29 10:36:48 2026] Logger: changing loglevel from DEBUG to INFO
[WARN  Wed Apr 29 10:44:44 2026] Logger: changing loglevel from DEBUG to INFO
[WARN  Wed Apr 29 10:44:44 2026] Logger: changing loglevel from DEBUG to INFO
[WARN  Wed Apr 29 10:49:43 2026] Logger: changing loglevel from DEBUG to INFO
[WARN  Wed Apr 29 10:49:47 2026] Logger: changing loglevel from DEBUG to INFO
[WARN  Wed Apr 29 10:50:19 2026] Logger: changing loglevel from DEBUG to INFO
[WARN  Wed Apr 29 10:50:19 2026] Logger: changing loglevel from DEBUG to INFO
[WARN  Wed Apr 29 10:53:58 2026] Logger: changing loglevel from DEBUG to INFO
[WARN  Wed Apr 29 10:56:42 2026] Logger: changing loglevel from DEBUG to INFO
[WARN  Wed Apr 29 11:01:35 2026] Logger: changing loglevel from DEBUG to INFO
[ERROR Wed Apr 29 11:12:40 2026] Invalid signature
[ERROR Wed Apr 29 11:14:51 2026] Invalid signature
[ERROR Wed Apr 29 11:14:53 2026] Invalid signature
[ERROR Wed Apr 29 11:15:27 2026] Invalid signature
[ERROR Wed Apr 29 11:15:43 2026] Invalid signature
[ERROR Wed Apr 29 11:15:45 2026] Invalid signature
[WARN  Wed Apr 29 11:16:01 2026] Logger: changing loglevel from DEBUG to INFO
[WARN  Wed Apr 29 11:20:01 2026] Logger: changing loglevel from DEBUG to INFO
[ERROR Wed Apr 29 11:20:59 2026] Invalid signature
[ERROR Wed Apr 29 11:48:04 2026] Invalid signature
[ERROR Wed Apr 29 11:50:28 2026] Invalid signature
[ERROR Wed Apr 29 11:50:29 2026] Invalid signature
[ERROR Wed Apr 29 11:50:49 2026] Invalid signature
[ERROR Wed Apr 29 11:50:52 2026] Invalid signature
[ERROR Wed Apr 29 11:51:03 2026] Invalid signature
[ERROR Wed Apr 29 11:51:04 2026] Invalid signature
[ERROR Wed Apr 29 12:55:15 2026] Invalid signature
[ERROR Wed Apr 29 12:55:28 2026] Invalid signature
[ERROR Wed Apr 29 12:55:41 2026] Invalid signature
[ERROR Wed Apr 29 12:57:37 2026] Invalid signature
[ERROR Wed Apr 29 12:57:41 2026] Invalid signature
[WARN  Wed Apr 29 14:47:20 2026] Logger: changing loglevel from DEBUG to INFO
[ERROR Wed Apr 29 14:57:31 2026] Invalid signature
[ERROR Wed Apr 29 14:57:41 2026] Invalid signature
[ERROR Wed Apr 29 15:05:20 2026] Invalid signature

/var/log/nginx/vaultwarden.domain-access.log

192.168.1.4 - - [29/Apr/2026:12:01:37 +0200] "GET / HTTP/2.0" 302 138 "-" "Mozilla/5.0 (Kubuntu; Linux i686; rv:123.0) Gecko/20100101 Firefox/123.0"
192.168.1.4 - - [29/Apr/2026:12:04:01 +0200] "GET / HTTP/2.0" 302 138 "http://coffre.beta.mapper.space" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.0.0 Safari/537.36"
192.168.1.4 - - [29/Apr/2026:12:04:01 +0200] "GET / HTTP/2.0" 302 138 "http://coffre.beta.mapper.space" "Mozilla/5.0 (Linux; Android 8.0.0; SM-G965U Build/R16NW) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.111 Mobile Safari/537.36"
192.168.1.4 - - [29/Apr/2026:12:10:49 +0200] "GET / HTTP/2.0" 302 138 "-" "Mozilla/5.0(WindowsNT10.0;WOW64)AppleWebKit/537.36(KHTML,likeGecko)Chrome/49.0.2623.22Safari/537.36SE2.XMetaSr1.0"
192.168.1.4 - - [29/Apr/2026:12:10:50 +0200] "GET / HTTP/2.0" 302 138 "-" "Mozilla/5.0 (Linux; Android 10; CLT-AL00 Build/HUAWEICLT-AL00; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/76.0.3809.89 Mobile Safari/537.36 T7/11.20 SP-engine/2.16.0 baiduboxapp/11.20.0.14 (Baidu; P1 10) NABar/1.0"
192.168.1.4 - - [29/Apr/2026:12:57:37 +0200] "GET /admin HTTP/2.0" 302 138 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:149.0) Gecko/20100101 Firefox/149.0"
192.168.1.4 - - [29/Apr/2026:12:57:41 +0200] "GET / HTTP/2.0" 302 138 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:149.0) Gecko/20100101 Firefox/149.0"
192.168.1.4 - - [29/Apr/2026:15:05:12 +0200] "GET / HTTP/2.0" 302 138 "-" "Mozilla/5.0 (X11; Linux i686; rv:109.0) Gecko/20100101 Firefox/120.0"

/var/log/nginx/wanderer.domain-access.log

192.168.1.4 - - [29/Apr/2026:12:55:15 +0200] "GET /admin/_/ HTTP/2.0" 302 138 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:149.0) Gecko/20100101 Firefox/149.0"
192.168.1.4 - - [29/Apr/2026:12:55:28 +0200] "GET /admin/_/ HTTP/2.0" 302 138 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:149.0) Gecko/20100101 Firefox/149.0"
192.168.1.4 - - [29/Apr/2026:12:55:41 +0200] "GET /admin/_/ HTTP/2.0" 302 138 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:149.0) Gecko/20100101 Firefox/149.0"
192.168.1.4 - - [29/Apr/2026:14:57:31 +0200] "GET /admin/_/ HTTP/2.0" 302 138 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:149.0) Gecko/20100101 Firefox/149.0"
192.168.1.4 - - [29/Apr/2026:14:57:41 +0200] "GET /admin/_/ HTTP/2.0" 302 138 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:149.0) Gecko/20100101 Firefox/149.0"
192.168.1.4 - - [29/Apr/2026:15:05:20 +0200] "GET /admin/_/ HTTP/2.0" 302 138 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:149.0) Gecko/20100101 Firefox/149.0

Edit: Alright, I’m going to feel really dumb but I went and manually cleared the cache in Firefox settings. The issue is gone :person_facepalming: :person_facepalming:

Note for myself: Shift+Ctrl+R is NOT always enough to clear the cache.

Thanks for your suggestions @otm33 :slight_smile:

1 Like