Enabling IP address of remote server

[matthewthomaskelly]

What configuration files need amending in the OpenRelik default installation when using the install.sh script, please?

I access a virtualised environment using a VPN and would like to continue doing so whilst testing out OpenRelik.

So far I have found references to localhost in config.env and settings.toml that I have amended to the private IP for the server.

There are also references to 127.0.0.1 within docker-compose.yml. Would these need amending too?

[hacktobeer]

Some questions to understand the issue better:

• you have installed the openrelik stack on a remote server, correct?
• you want to be able to access the openrelik-ui remotely?
• the stack in itself is all running on localhost so no need to change any IP addresses in the config.env or docker-compose.yml file. Unless you have installed the individual containers on seperate hosts!

[matthewthomaskelly]

openrelik installed on remote server, yes
I want to access openrelik-ui from my local computer which connects to this same domain (using a vpn)
The stack is presently all running on the same remote server.

[hacktobeer]

The relevant URLs to adjust are:
settings.toml:

# This should be set to the URL of your backend server.
api_server_url = "https://[your_ip_or_domain]:8710"

# This should be set to the URL of your frontend server.
ui_server_url = "https://[your_ip_or_domain]"

# This should be set to the URL of your frontend server.
allowed_origins = ["https://[your_ip_or_domain]"]

docker-compose.yml:
Make sure the openrelik-server and openrelik-ui have the following ports exposed:

• 8710 - openrelik server for API calls
• 8711 - openrelik UI

We would really advice you to put a (e.g. nginx) reverse proxy in front of your setup. If not make sure you are using a VPN setup to keep your services secure.

A setup multiple people use with Tailscale is described here https://openrelik.org/guides/tailscale/

[matthewthomaskelly]

Many thanks @hacktobeer

This almost works, but I am presented with a blank webpage when I navigate to the url {IP}:8711

What could I have missed?

I access the servers in question using a VPN

[hacktobeer]

Without having a look at the logs and/or setup this is probably an allowed_origins error. Opening the developer tools in your browser should show some console errors when reloading that page.

Adding the relevant entries to settings.toml should fix it after that.

# This should be set to the URL of your frontend server.
allowed_origins = ["https://[your_ip_or_domain]"]

Does you stack start correctly?
docker compose logs openrelik-server
docker compose logs openrelik-ui

[hacktobeer]

Another way: Spinning up the stack on a virtual machine without changing anything and ssh-ing into the remote machine while port forwarding port 8710/8711 should give you a working UI on localhost:8711

[matthewthomaskelly]

Another way: Spinning up the stack on a virtual machine without changing anything and ssh-ing into the remote machine while port forwarding port 8710/8711 should give you a working UI on localhost:8711

Many thanks for that @hacktobeer. This method worked with the following command:

ssh -L 8710:localhost:8710 -L 8711:localhost:8711 {user-name}@{open-relik-IP} -N

This enabled me to open a browser on my machine and to connect to OpenRelik UI instance using localhost:8711

[matthewthomaskelly]

Without having a look at the logs and/or setup this is probably an allowed_origins error. Opening the developer tools in your browser should show some console errors when reloading that page.

Adding the relevant entries to settings.toml should fix it after that.

# This should be set to the URL of your frontend server.
allowed_origins = ["https://[your_ip_or_domain]"]

Does you stack start correctly? docker compose logs openrelik-server docker compose logs openrelik-ui

I can still not get this to work in the same way.

We connect to our environment using a VPN and can connect to a TimeSketch UI instance by just typing the relevant IP in a browser.

It may be that is because Timesketch is designed to be accessed in that way and that OpenRelik is not. Please do tell me if I am trying to do something that it is not expected to do.

Can I clarify what is meant by backend_server and frontend_server. At present OpenRelik is only running on one device, having just installed this and intending to trial it for our needs and to try it out.

Does that mean that the backend and frontend are the same until we separate them out?

[Compr0mzd]

Hey I did the same kinda of setup with Tailscale but using a cloudflare tunnel. I can access the api using my domain however when accessing the relik URL i get a blank page with :

link rel=preload> has an unsupported `type` value relik.mydomain.com

Failed to load resource: net::ERR_CONNECTION_REFUSED http://localhost:8710/api/v1/users/me/

Uncaught (in promise) TypeError: Cannot read properties of undefined (reading 'status') at index-D3GHiz3k.js:110:77625

I indeed changed the listening domain in the settings.toml.
Any idea why is it still trying to reach localhost ?