Can access CVAT over LAN but not Internet

[LukeAI]

Having followed the instructions here #1011

(using local IP and default port 8080) I am able to access CVAT across the LAN. I would like to be able to access CVAT from anywhere using the public IP address and port. What config changes should I make? and how should the NAT port forward be configured?

I did try the above but with our public IP address and an 8080 port forward on the firewall but it didn't work :/

(I have successfully set this up with a previous version of CVAT but I'm a bit confused as to how it works now re. different ports, HOSTS etc.)

My working LAN config.

base.py.txt
docker-compose.override.yml.txt
react_nginx.conf.txt

[yxftju]

I could not login over LAN ,can you post your configuration ? I want to have a look .

[LukeAI]

I could not login over LAN ,can you post your configuration ? I want to have a look .

I've done so, but I just followed the instructions in #1011 and then rebuilt everything. I deleted the volume before rebuilding just to be sure I was purging everything and I don't understand what's going on but probably not necessary.

[bsekachev]

@LukeAI
I agree it might confuse a little
For example we have these ports:

	Port over the Internet	LAN port	Port inside Docker
REST API	8060	8070	8080
UI SERVER	7060	7070	80

Than config file should be:

services:
  cvat:
    ports:
      - "8070:8080"
    environment:
      ALLOWED_HOSTS: '*'
      UI_SCHEME: http
      UI_HOST: <your external ip address>
      UI_PORT: 7060
  cvat_ui:
    build:
      args:
        REACT_APP_API_HOST: <your external ip address>
        REACT_APP_API_PORT: 8060
      dockerfile: Dockerfile.ui
    ports:
      - "7070:80"

Also you need to trigger port on a router:

Internet 8060 => Local 8070
Internet 7060 => Local 7070

And setup your firewall for these ports.

[LukeAI]

@bsekachev

Ok that works, thankyou very much for you help. This is surely far too complicated a setup for what must be the most common single use-case? Especially given that it is undocumented? I would never have worked this out without #1011 (comment) and your help.

Would it be welcomed if I added a step by step summary to the README or Wiki?

[bsekachev]

@LukeAI

Sure. It would be great.
I would recommend to create a section (something like: Setup for LAN/Internet) here in advanced installation topics and provide some steps, config examples, short explanations.
I believe it's a valuable contribution.

[LukeAI]

cool, will do so later. but maybe the edit to base.py should just be mainlined? It's an edit that is around 3 directories deep and it doesn't (??) break anything or make anything less secure?

[bsekachev]

@LukeAI

I am not sure why we should edit this file

[LukeAI]

I don't know either, I just followed #1011 (comment)

[bsekachev]

@LukeAI

Ok, just send us a PR, we will look and test it.

[azhavoro]

@LukeAI Can I close the issue?

[LukeAI]

@LukeAI

Sure. It would be great.
I would recommend to create a section (something like: Setup for LAN/Internet) here in advanced installation topics and provide some steps, config examples, short explanations.
I believe it's a valuable contribution.

I'm not sure if I'm qualified to make this addition :/

My setup was working on Friday and has been up over the weekend continuously but today, Monday I am getting the same old "authorization failure" login error on both LAN and WAN.

Tried pulling the latest from the repo and rebuilding everything and I still get the error messages but am now able to login again.

[LukeAI]

Using this config

@LukeAI
I agree it might confuse a little
For example we have these ports:
Port over the Internet LAN port Port inside Docker
REST API 8060 8070 8080
UI SERVER 7060 7070 80

Than config file should be:

services:
  cvat:
    ports:
      - "8070:8080"
    environment:
      ALLOWED_HOSTS: '*'
      UI_SCHEME: http
      UI_HOST: <your external ip address>
      UI_PORT: 7060
  cvat_ui:
    build:
      args:
        REACT_APP_API_HOST: <your external ip address>
        REACT_APP_API_PORT: 8060
      dockerfile: Dockerfile.ui
    ports:
      - "7070:80"

Also you need to trigger port on a router:

Internet 8060 => Local 8070
Internet 7060 => Local 7070

And setup your firewall for these ports.