How can I use HTTPS in LobeChat?

[cantalupo555]

To be successful with auth0, wouldn't it have to be directed to port 443?
I'm using docker.
If anyone can help, I would be grateful.

# Website domain
APP_URL=https://chat.yourdomain.com

# DB required environment variables
KEY_VAULTS_SECRET=jgwsK28dspyVQoIf8/M3IIHl1h6LYYceSYNXeLpy6uk=
# Postgres database connection string
DATABASE_URL=postgres://postgres:j!^AdGk(z+wEc*****qnvd;^=W@lobe-postgres:5432/postgres

# NEXT_AUTH
NEXT_AUTH_SECRET=0ht5*****
NEXT_AUTH_SSO_PROVIDERS=auth0
NEXTAUTH_URL=https://chat.yourdomain.com/api/auth
AUTH0_CLIENT_ID=WUAN*****
AUTH0_CLIENT_SECRET=WUA*****
AUTH0_ISSUER=https://dev-w0s*****7.us.auth0.com
ACCESS_CODE=e7Nr9ktV

# S3 related
S3_ACCESS_KEY_ID=2e7654dc75*****
S3_SECRET_ACCESS_KEY=4c58f8*****
S3_ENDPOINT=https://81cc5e7*****
S3_BUCKET=lobechat
S3_PUBLIC_DOMAIN=https://s3-lobechat.yourdomain.com

#API Key
ENABLED_OPENAI=0
ENABLED_OLLAMA=0
ANTHROPIC_API_KEY=sk-ant-api03-U1AlRX*****
OPENROUTER_API_KEY=sk-or-v1-1932c73*****
OPENROUTER_MODEL_LIST=-all,+anthropic/claude-3-haiku,+meta-llama/llama-3.1-70b-instruct,+meta-llama/llama-3.1-405b-instruct,+qwen/qwen-2-72b-instruct,+openai/gpt-4o-mini,+google/gemini-flash-1.5

docker logs -f lobe-chat-database
[Database] Start to migration...
✅ database migration pass.
-------------------------------------
  ▲ Next.js 14.2.8
  - Local:        http://localhost:3210
  - Network:      http://0.0.0.0:3210

 ✓ Starting...
 ✓ Ready in 194ms
next auth: undefined
next auth: undefined

[arvinxx]

To be successful with auth0, wouldn't it have to be directed to port 443?

I think it's yes? maybe you need the HTTPS

[cantalupo555]

Thank you very much, I used Nginx to enable https on Lobechat.
Now the authentication problem is solved.

[cantalupo555]

Replace "yourdomain" with your actual domain.
Your domain's DNS needs to be directed to your server, VPS, container...
I'm using Ubuntu 24.04

sudo apt install nginx certbot python3-certbot-nginx -y

Just 4 lines you need to replace "yourdomain" with your actual domain.

sudo nano /etc/nginx/sites-available/lobechat

server {
    listen 80;
    server_name chat.yourdomain.com;
    return 301 https://$server_name$request_uri;
}

server {
    listen 443 ssl;
    server_name chat.yourdomain.com;

    ssl_certificate /etc/letsencrypt/live/chat.yourdomain.com/fullchain.pem;
    ssl_certificate_key /etc/letsencrypt/live/chat.yourdomain.com/privkey.pem;

    # Configurações de segurança SSL recomendadas
    ssl_protocols TLSv1.2 TLSv1.3;
    ssl_prefer_server_ciphers on;
    ssl_ciphers ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384;

    location / {
        proxy_pass http://localhost:3210;
        proxy_http_version 1.1;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection 'upgrade';
        proxy_set_header Host $host;
        proxy_cache_bypass $http_upgrade;
    }
}

sudo ln -s /etc/nginx/sites-available/lobechat /etc/nginx/sites-enabled/
sudo rm /etc/nginx/sites-enabled/default

sudo systemctl stop nginx
sudo certbot certonly --standalone -d chat.yourdomain.com

sudo systemctl start nginx