[GH-ISSUE #5830] Failed to setup using external traefik instance. #11813

Open
opened 2026-08-05 01:31:09 -04:00 by saavagebueno · 3 comments
Owner

Originally created by @CL107 on GitHub (Apr 8, 2026).
Original GitHub issue: https://github.com/netbirdio/netbird/issues/5830

Describe the problem

Failing to setup netbird via getting started script. I have an external traefik instance configured with certs etc. Works fine for other services and this one. When i run the script and give it the relevant information, it gets stuck on Waiting for NetBird server to become ready. Once that times out it gives an error.

Worth noting, when i say it works for this one above, I mean I can access the web dashboard login page if i route to the expected domain. So traefik is working. I dont see the initial user setup page, nor can i route to /setup. It routes me back to /oauth2/auth/local/login?...

To Reproduce

  1. Have an external traefik instance deployed with access to the docker socket.
  2. Deploy netbird using getting started script.
  3. Select external traefik
  4. Fill out remaining info

Expected behavior

A clear and concise description of what you expected to happen.

Are you using NetBird Cloud?

Self hosted

NetBird version

Latest tag at issue creation time.

Is any other VPN software installed?

No

Debug output

Taking too long. Checking logs...
netbird-server  | 2026-04-08T18:51:57.019Z INFO management/server/migration/migration.go:358: Migration of empty enc_algo to default value in table deleted_users completed
netbird-server  | 2026-04-08T18:51:57.020Z WARN management/internals/controllers/network_map/controller/controller.go:86: failed to parse NB_EXPERIMENT_NETWORK_MAP, using default value false: strconv.ParseBool: parsing "": invalid syntax
netbird-server  | 2026-04-08T18:51:57.021Z INFO management/server/idp/embedded.go:265: embedded Dex IDP initialized with issuer: https://vpn.fsteamnapier.co.uk/oauth2
netbird-server  | 2026-04-08T18:51:57.021Z INFO management/server/account_request_buffer.go:45: set account request buffer interval to 100ms
netbird-server  | 2026-04-08T18:51:57.021Z WARN management/internals/controllers/network_map/controller/controller.go:662: failed to parse peer update interval, using default value 1ms: strconv.Atoi: parsing "": invalid syntax
netbird-server  | 2026-04-08T18:51:57.021Z INFO management/internals/controllers/network_map/controller/controller.go:678: set peer update buffer interval to 1ms
netbird-server  | 2026-04-08T18:51:57.021Z INFO management/server/account.go:245: single account mode enabled, accounts number 1
netbird-server  | 2026-04-08T18:51:57.021Z INFO management/internals/server/boot.go:202: One-time token store initialized for proxy authentication
netbird-server  | 2026-04-08T18:51:57.021Z INFO management/internals/server/boot.go:164: ProxyService registered on gRPC server
netbird-server  | 2026-04-08T18:51:57.021Z INFO combined/cmd/root.go:332: Signal server registered on port :80
netbird-server  | 2026-04-08T18:51:57.022Z INFO combined/cmd/root.go:337: Relay WebSocket handler added (path: /relay)
netbird-server  | 2026-04-08T18:51:57.022Z INFO management/internals/server/server.go:188: running gRPC backward compatibility server: [::]:33073
netbird-server  | 2026-04-08T18:51:57.022Z INFO management/internals/server/server.go:220: management server version 0.68.0
netbird-server  | 2026-04-08T18:51:57.022Z INFO management/internals/server/server.go:221: running HTTP server and gRPC server on the same port: [::]:80
netbird-server  | 2026-04-08T18:51:57.022Z INFO combined/cmd/root.go:345: Relay server instance URL: rels://vpn.fsteamnapier.co.uk:443
netbird-server  | 2026-04-08T18:51:57.022Z INFO combined/cmd/root.go:346: Relay WebSocket multiplexed on management port (no separate relay listener)
netbird-server  | 2026-04-08T18:51:57.022Z INFO combined/cmd/root.go:352: running metrics server: :9090/metrics
netbird-server  | 2026-04-08T18:51:57.022Z INFO relay/healthcheck/healthcheck.go:76: starting healthcheck server on: http://localhost:9000/health
netbird-server  | 2026-04-08T18:51:57.022Z INFO [component: stun] stun/server.go:71: STUN server listening on [::]:3478
netbird-server  | 2026-04-08T18:52:06.709Z INFO [context: HTTP, requestID: d7ba7ljpv42s73cgl0gg] management/server/http/handlers/instance/instance_handler.go:49: instance setup status: false

Additional context

My traefik config:

providers:
  file:
    directory: /etc/traefik/conf.d
    watch: true
  docker:
    endpoint: "unix:///var/run/docker.sock"

entryPoints:
  web:
    address: ':80'
    http:
      redirections:
        entryPoint:
          to: websecure
          scheme: https
  websecure:
    address: ':443'
    http:
      tls:
        certResolver: letsencrypt
    transport:
      respondingTimeouts:
        idleTimeout: 30s
certificatesResolvers:
  letsencrypt:
    acme:
      email: "someemail"
      storage: /etc/traefik/ssl/acme.json
      caServer: https://acme-v02.api.letsencrypt.org/directory
      dnsChallenge:
        provider: cloudflare
        delayBeforeCheck: 0
        resolvers:
          - "1.1.1.1:53"
          - "8.8.8.8:53"

api:
  dashboard: true

log:
  filePath: /var/log/traefik/traefik.log
  format: json
  level: DEBUG

accessLog:
  filePath: /var/log/traefik/traefik-access.log
  format: json
  filters:
    statusCodes:
      - "200"
      - "400-599"
    retryAttempts: true
    minDuration: "10ms"
  bufferingSize: 0
  fields:
    headers:
      defaultMode: drop
      names:
        User-Agent: keep

Have you tried these troubleshooting steps?

  • Reviewed client troubleshooting (if applicable)
  • Checked for newer NetBird versions
  • Searched for similar issues on GitHub (including closed ones)
  • Restarted the NetBird client
  • Disabled other VPN software
  • Checked firewall settings
Originally created by @CL107 on GitHub (Apr 8, 2026). Original GitHub issue: https://github.com/netbirdio/netbird/issues/5830 **Describe the problem** Failing to setup netbird via getting started script. I have an external traefik instance configured with certs etc. Works fine for other services and this one. When i run the script and give it the relevant information, it gets stuck on `Waiting for NetBird server to become ready`. Once that times out it gives an error. Worth noting, when i say it works for this one above, I mean I can access the web dashboard login page if i route to the expected domain. So traefik is working. I dont see the initial user setup page, nor can i route to /setup. It routes me back to `/oauth2/auth/local/login?...` **To Reproduce** 1. Have an external traefik instance deployed with access to the docker socket. 2. Deploy netbird using getting started script. 3. Select external traefik 4. Fill out remaining info **Expected behavior** A clear and concise description of what you expected to happen. **Are you using NetBird Cloud?** Self hosted **NetBird version** Latest tag at issue creation time. **Is any other VPN software installed?** No **Debug output** ``` Taking too long. Checking logs... netbird-server | 2026-04-08T18:51:57.019Z INFO management/server/migration/migration.go:358: Migration of empty enc_algo to default value in table deleted_users completed netbird-server | 2026-04-08T18:51:57.020Z WARN management/internals/controllers/network_map/controller/controller.go:86: failed to parse NB_EXPERIMENT_NETWORK_MAP, using default value false: strconv.ParseBool: parsing "": invalid syntax netbird-server | 2026-04-08T18:51:57.021Z INFO management/server/idp/embedded.go:265: embedded Dex IDP initialized with issuer: https://vpn.fsteamnapier.co.uk/oauth2 netbird-server | 2026-04-08T18:51:57.021Z INFO management/server/account_request_buffer.go:45: set account request buffer interval to 100ms netbird-server | 2026-04-08T18:51:57.021Z WARN management/internals/controllers/network_map/controller/controller.go:662: failed to parse peer update interval, using default value 1ms: strconv.Atoi: parsing "": invalid syntax netbird-server | 2026-04-08T18:51:57.021Z INFO management/internals/controllers/network_map/controller/controller.go:678: set peer update buffer interval to 1ms netbird-server | 2026-04-08T18:51:57.021Z INFO management/server/account.go:245: single account mode enabled, accounts number 1 netbird-server | 2026-04-08T18:51:57.021Z INFO management/internals/server/boot.go:202: One-time token store initialized for proxy authentication netbird-server | 2026-04-08T18:51:57.021Z INFO management/internals/server/boot.go:164: ProxyService registered on gRPC server netbird-server | 2026-04-08T18:51:57.021Z INFO combined/cmd/root.go:332: Signal server registered on port :80 netbird-server | 2026-04-08T18:51:57.022Z INFO combined/cmd/root.go:337: Relay WebSocket handler added (path: /relay) netbird-server | 2026-04-08T18:51:57.022Z INFO management/internals/server/server.go:188: running gRPC backward compatibility server: [::]:33073 netbird-server | 2026-04-08T18:51:57.022Z INFO management/internals/server/server.go:220: management server version 0.68.0 netbird-server | 2026-04-08T18:51:57.022Z INFO management/internals/server/server.go:221: running HTTP server and gRPC server on the same port: [::]:80 netbird-server | 2026-04-08T18:51:57.022Z INFO combined/cmd/root.go:345: Relay server instance URL: rels://vpn.fsteamnapier.co.uk:443 netbird-server | 2026-04-08T18:51:57.022Z INFO combined/cmd/root.go:346: Relay WebSocket multiplexed on management port (no separate relay listener) netbird-server | 2026-04-08T18:51:57.022Z INFO combined/cmd/root.go:352: running metrics server: :9090/metrics netbird-server | 2026-04-08T18:51:57.022Z INFO relay/healthcheck/healthcheck.go:76: starting healthcheck server on: http://localhost:9000/health netbird-server | 2026-04-08T18:51:57.022Z INFO [component: stun] stun/server.go:71: STUN server listening on [::]:3478 netbird-server | 2026-04-08T18:52:06.709Z INFO [context: HTTP, requestID: d7ba7ljpv42s73cgl0gg] management/server/http/handlers/instance/instance_handler.go:49: instance setup status: false ``` **Additional context** My traefik config: ```yaml providers: file: directory: /etc/traefik/conf.d watch: true docker: endpoint: "unix:///var/run/docker.sock" entryPoints: web: address: ':80' http: redirections: entryPoint: to: websecure scheme: https websecure: address: ':443' http: tls: certResolver: letsencrypt transport: respondingTimeouts: idleTimeout: 30s certificatesResolvers: letsencrypt: acme: email: "someemail" storage: /etc/traefik/ssl/acme.json caServer: https://acme-v02.api.letsencrypt.org/directory dnsChallenge: provider: cloudflare delayBeforeCheck: 0 resolvers: - "1.1.1.1:53" - "8.8.8.8:53" api: dashboard: true log: filePath: /var/log/traefik/traefik.log format: json level: DEBUG accessLog: filePath: /var/log/traefik/traefik-access.log format: json filters: statusCodes: - "200" - "400-599" retryAttempts: true minDuration: "10ms" bufferingSize: 0 fields: headers: defaultMode: drop names: User-Agent: keep ``` **Have you tried these troubleshooting steps?** - [x] Reviewed [client troubleshooting](https://docs.netbird.io/how-to/troubleshooting-client) (if applicable) - [x] Checked for newer NetBird versions - [x] Searched for similar issues on GitHub (including closed ones) - [x] Restarted the NetBird client - [x] Disabled other VPN software - [x] Checked firewall settings
saavagebueno added the triage-needed label 2026-08-05 01:31:09 -04:00
Author
Owner

@eeak commented on GitHub (Apr 17, 2026):

I confirm. I have the same.

<!-- gh-comment-id:4266716167 --> @eeak commented on GitHub (Apr 17, 2026): I confirm. I have the same.
Author
Owner

@timonBusch commented on GitHub (May 4, 2026):

I am also encountering this issue but my instance does not get stuck at Waiting for NetBird server to become ready and logs do not show any errors

<!-- gh-comment-id:4372879579 --> @timonBusch commented on GitHub (May 4, 2026): I am also encountering this issue but my instance does not get stuck at `Waiting for NetBird server to become ready` and logs do not show any errors
Author
Owner

@timonBusch commented on GitHub (May 26, 2026):

I was able to get it to work by removing all old netbird images and reploying with the latest version

<!-- gh-comment-id:4547621160 --> @timonBusch commented on GitHub (May 26, 2026): I was able to get it to work by removing all old netbird images and reploying with the latest version
Sign in to join this conversation.
No Label triage-needed
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: DYNR/netbird#11813