Error in diagnosis related to internet access problems

[MarioExperience]

Vaultwarden Support String

Versions
Server Installed
1.32.5
Server Latest Unknown
-
Web Installed
2024.6.2c
Database
SQLite: 3.46.0
Checks
OS/Arch
linux / x86_64
Running within a container
Yes (Base: Debian)
Environment settings overridden
No
Uses a reverse proxy
Yes
IP header Match
Config/Server: X-Real-IP
Internet access Error
No
Internet access via a proxy
Yes
DNS (github.com) Ok
140.82.121.3
Date & Time (Local)
Server: 2024-12-10 09:48:19 +01:00
Date & Time (UTC) Server/Browser Ok
NTP: Unable to fetch NTP time.Server: 2024-12-10 08:48:19 UTCBrowser: 2024-12-10 08:48:21 UTC
Domain configuration Match HTTPS
Server: https://problemsvaultwarden/admin/diagnosticsBrowser: https://problemsvaultwarden/admin/diagnostics

Vaultwarden Build Version

1.32.5

Deployment method

Official Container Image

Custom deployment method

No response

Reverse Proxy

nginx 1.27.0

Host/Server Operating System

Linux

Operating System Version

No response

Clients

Web Vault

Client Version

No response

Steps To Reproduce

N/A

Expected Result

In the "Internet Access" section it should appear as Yes, because the proxy is configured and it is observed that it has Internet access:

root@bitwarden:/# apt update
Get:1 http://deb.debian.org/debian bookworm InRelease [151 kB]
Get:2 http://deb.debian.org/debian bookworm-updates InRelease [55.4 kB]
Get:3 http://deb.debian.org/debian-security bookworm-security InRelease [48.0 kB]
Get:4 http://deb.debian.org/debian bookworm/main amd64 Packages [8789 kB]
Get:5 http://deb.debian.org/debian bookworm-updates/main amd64 Packages [8856 B]
Get:6 http://deb.debian.org/debian-security bookworm-security/main amd64 Packages [214 kB]
Fetched 9266 kB in 2s (3965 kB/s)                    
Reading package lists... Done
Building dependency tree... Done
Reading state information... Done
3 packages can be upgraded. Run 'apt list --upgradable' to see them.

Actual Result

Logs

No response

Screenshots or Videos

No response

Additional Context

No response

[BlackDex]

Well, if it keeps saying that, it isn't able to access github.com and fetch content there.

So, either something blocks this request.

What do the Vaultwarden logs report?
Try setting LOG_LEVEL=debug if you do not see anything.

[BlackDex]

It might be the HTTPS_PROXY config is not valid for example.
Could you provide what you have configured for those values?

[BlackDex]

I just tested locally with HTTPS_PROXY both socks5 and socks5h, and also regular http proxy. Both works as intended.

So either your HTTPS_PROXY is probably invalid or something on the proxy side is blocking stuff.

Please check the proxy logs.

[zmweske]

My /admin/diagnostics page looks very similar (but no internet proxy, only a reverse proxy) and I was able to wget the github page as used here, which appears to be how it checks for that internet access item. I am using the latest 1.33.2-alpine image and DNS appears to be working. Any thoughts?

[zmweske]

I thought this was an issue interfering with the icon service, turns out it was an un-expiring icon miss cache and a very stale cache.

I'm still curious what the problem above might be but impact is currently minimal, so it's a low priority

[BlackDex]

The looks should indicate what's going on there.
For some reason Vaultwarden isn't able to contact GitHub and the time ntp web API.

So it's either blocked by a firewall, or something else in the docker network is causing an issue.

[zmweske]

The weird part is that I can hit github from inside the container and even download resources from it. I didn't test NTP directly but I know that it is synced with the host, which is working fine. I guess as of now it doesn't seem to have any effect with user experience but just weird nonetheless. Thanks for the reply!

[BlackDex]

So, what do the logs report then?