[GH-ISSUE #5130] NetBird self-hosted gets stalled on login page #9968

Open
opened 2026-08-05 01:24:10 -04:00 by saavagebueno · 19 comments
Owner

Originally created by @helioloureiro on GitHub (Jan 19, 2026).
Original GitHub issue: https://github.com/netbirdio/netbird/issues/5130

Describe the problem

I'm not sure what is causing this, but from times to times the NetBird gets stalled on login on this image:

Image

Last time I just fired a docker compose pull and docker compose restart to get it back online, but now it doesn't work.

Checking on the browser debug, I can see it gets stuck on this url:

https://netbird.[REDACTED]/oauth2/auth?client_id=netbird-dashboard&redirect_uri=https%3A%2F%2Fnetbird.[REDACTED]%2Fnb-auth&scope=openid%20profile%20email%20offline_access&response_type=code&audience=netbird-dashboard&state=k[REDACTED]&nonce=b[REDACTED]&code_challenge=X[REDACTED]&code_challenge_method=S256

If I try to curl this url, I just get stalled. No answer is sent back (and probably because of that I don't see anything on caddy logs).

I just noticed the follow error long on management:

netbird-management  | 2026-01-19T12:18:12Z ERRO [keysLocation: http://localhost:80/oauth2/keys] shared/auth/jwt/validator.go:76: could not get keys from location: Get "http://localhost:80/oauth2/keys": dial tcp [::1]:80: connect: connection refused

To Reproduce

Not sure because I don't know what triggered this behavior.

I've configured IDP to Microsoft Entra ID.

Expected behavior

To open the dashboard for login.

Are you using NetBird Cloud?

No. Self-hosted.

NetBird version

From docker compose images:

CONTAINER            REPOSITORY             TAG                 PLATFORM            IMAGE ID            SIZE                CREATED
netbird-caddy        caddy                  latest              linux/amd64         2adb640cdc0c        22.5MB              2 days ago
netbird-coturn       coturn/coturn          latest              linux/amd64         5de3fc6be2da        45.4MB              12 days ago
netbird-dashboard    netbirdio/dashboard    latest              linux/amd64         65fe33f2c10b        46.3MB              4 hours ago
netbird-management   netbirdio/management   latest              linux/amd64         7a6d50e8bb17        88.6MB              2 days ago
netbird-relay        netbirdio/relay        latest              linux/amd64         d8ebbe94e482        15.9MB              2 days ago
netbird-signal       netbirdio/signal       latest              linux/amd64         4ab388acfe9a        16.1MB              2 days ago

Is any other VPN software installed?

No.

Debug output

  • management:
netbird-management  | 2026-01-19T12:18:11Z INFO management/cmd/management.go:306: running with the embedded IdP: https://netbird.[REDACTED]/oauth2
netbird-management  | 2026-01-19T12:18:11Z INFO management/cmd/management.go:309: Relay addresses: [rels://netbird.[REDACTED]:443]
netbird-management  | 2026-01-19T12:18:12Z INFO management/server/store/store.go:292: using SQLite store engine
netbird-management  | 2026-01-19T12:18:12Z INFO management/server/store/sql_store.go:98: Setting transaction timeout to 5m0s
netbird-management  | 2026-01-19T12:18:12Z INFO management/server/store/sql_store.go:112: Set max open db connections to 1, max idle to 1, max lifetime to 1h0m0s, max idle time to 3m0s
netbird-management  | 2026-01-19T12:18:12Z INFO management/server/migration/migration.go:263: No plain setup keys found in table setup_keys, no migration needed
netbird-management  | 2026-01-19T12:18:12Z INFO management/server/migration/migration.go:301: Migration of plain setup key to hashed setup key completed
netbird-management  | 2026-01-19T12:18:12Z INFO management/server/migration/migration.go:344: No rows with empty enabled found in table network_resources, no migration needed
netbird-management  | 2026-01-19T12:18:12Z INFO management/server/migration/migration.go:358: Migration of empty enabled to default value in table network_resources completed
netbird-management  | 2026-01-19T12:18:12Z INFO management/server/migration/migration.go:344: No rows with empty enabled found in table network_routers, no migration needed
netbird-management  | 2026-01-19T12:18:12Z INFO management/server/migration/migration.go:358: Migration of empty enabled to default value in table network_routers completed
netbird-management  | 2026-01-19T12:18:12Z INFO management/server/migration/migration.go:344: No rows with empty name found in table users, no migration needed
netbird-management  | 2026-01-19T12:18:12Z INFO management/server/migration/migration.go:358: Migration of empty name to default value in table users completed
netbird-management  | 2026-01-19T12:18:12Z INFO management/server/migration/migration.go:344: No rows with empty email found in table users, no migration needed
netbird-management  | 2026-01-19T12:18:12Z INFO management/server/migration/migration.go:358: Migration of empty email to default value in table users completed
netbird-management  | 2026-01-19T12:18:12Z INFO management/server/migration/migration.go:399: index idx_account_ip already exists on table peers
netbird-management  | 2026-01-19T12:18:12Z INFO management/server/migration/migration.go:399: index idx_account_dnslabel already exists on table peers
netbird-management  | 2026-01-19T12:18:12Z INFO management/server/migration/migration.go:399: index idx_peers_key_unique already exists on table peers
netbird-management  | 2026-01-19T12:18:12Z INFO management/internals/server/modules.go:45: geolocation service has been initialized from /var/lib/netbird/
netbird-management  | 2026-01-19T12:18:12Z INFO management/server/telemetry/app_metrics.go:193: enabled application metrics and exposing on http://0.0.0.0:9090
netbird-management  | 2026-01-19T12:18:12Z WARN management/internals/server/boot.go:108: TrustedPeers are configured to default value '0.0.0.0/0', '::/0'. This allows connection IP spoofing.
netbird-management  | 2026-01-19T12:18:12Z INFO management/server/account_request_buffer.go:45: set account request buffer interval to 100ms
netbird-management  | 2026-01-19T12:18:12Z INFO management/server/activity/store/sql_store.go:261: using sqlite as activity event store engine
netbird-management  | 2026-01-19T12:18:12Z INFO management/server/activity/store/sql_store.go:290: Set max open db connections to 1, max idle to 1, max lifetime to 1h0m0s, max idle time to 3m0s
netbird-management  | 2026-01-19T12:18:12Z INFO management/server/migration/migration.go:344: No rows with empty name found in table deleted_users, no migration needed
netbird-management  | 2026-01-19T12:18:12Z INFO management/server/migration/migration.go:358: Migration of empty name to default value in table deleted_users completed
netbird-management  | 2026-01-19T12:18:12Z INFO management/server/migration/migration.go:344: No rows with empty enc_algo found in table deleted_users, no migration needed
netbird-management  | 2026-01-19T12:18:12Z INFO management/server/migration/migration.go:358: Migration of empty enc_algo to default value in table deleted_users completed
netbird-management  | 2026-01-19T12:18:12Z WARN management/internals/controllers/network_map/controller/controller.go:84: failed to parse NB_EXPERIMENT_NETWORK_MAP, using default value false: strconv.ParseBool: parsing "": invalid syntax
netbird-management  | 2026-01-19T12:18:12Z INFO management/server/idp/embedded.go:200: embedded Dex IDP initialized with issuer: https://netbird.[REDACTED]/oauth2
netbird-management  | 2026-01-19T12:18:12Z INFO management/server/account_request_buffer.go:45: set account request buffer interval to 100ms
netbird-management  | 2026-01-19T12:18:12Z WARN management/internals/controllers/network_map/controller/controller.go:626: failed to parse peer update interval, using default value 1ms: strconv.Atoi: parsing "": invalid syntax
netbird-management  | 2026-01-19T12:18:12Z INFO management/internals/controllers/network_map/controller/controller.go:642: set peer update buffer interval to 1ms
netbird-management  | 2026-01-19T12:18:12Z INFO management/server/account.go:234: single account mode enabled, accounts number 1
netbird-management  | 2026-01-19T12:18:12Z ERRO [keysLocation: http://localhost:80/oauth2/keys] shared/auth/jwt/validator.go:76: could not get keys from location: Get "http://localhost:80/oauth2/keys": dial tcp [::1]:80: connect: connection refused
netbird-management  | 2026-01-19T12:18:12Z INFO management/internals/server/server.go:149: running gRPC backward compatibility server: [::]:33073
netbird-management  | 2026-01-19T12:18:12Z INFO management/internals/server/server.go:187: management server version 0.63.0
netbird-management  | 2026-01-19T12:18:12Z INFO management/internals/server/server.go:188: running HTTP server and gRPC server on the same port: [::]:80
netbird-management  | 2026-01-19T12:18:14Z WARN [requestID: d5n221mjm9hs73aom2bg, accountID: UNKNOWN, peerID: fxnf9gBHO0KKsripRM9vEl8S07eNZLoLqkVWrm7iDCk=, context: GRPC] management/internals/shared/grpc/server.go:606: failed logging in peer f[REDACTED]k=: no peer auth method provided, please use a setup key or interactive SSO login
  • dashboard:
netbird-dashboard  | 172.18.0.2 - - [19/Jan/2026:12:50:02 +0000] "GET / HTTP/1.1" 200 2343 "-" "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Mobile Safari/537.36" "172.18.0.1"
netbird-dashboard  | 172.18.0.2 - - [19/Jan/2026:12:50:02 +0000] "GET /_next/static/media/7385e8d9d3c5518f-s.p.ttf HTTP/1.1" 200 804612 "https://netbird.[REDACTED]/" "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Mobile Safari/537.36" "172.18.0.1"
netbird-dashboard  | 172.18.0.2 - - [19/Jan/2026:12:50:02 +0000] "GET /_next/static/css/3570cb5ada83882d.css HTTP/1.1" 200 634 "https://netbird.[REDACTED]/" "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Mobile Safari/537.36" "172.18.0.1"
netbird-dashboard  | 172.18.0.2 - - [19/Jan/2026:12:50:02 +0000] "GET /_next/static/css/9a051ab3da780e64.css HTTP/1.1" 200 26258 "https://netbird.[REDACTED]/" "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Mobile Safari/537.36" "172.18.0.1"
netbird-dashboard  | 172.18.0.2 - - [19/Jan/2026:12:50:02 +0000] "GET /_next/static/chunks/webpack-87c48bb03c170010.js HTTP/1.1" 200 2707 "https://netbird.[REDACTED]/" "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Mobile Safari/537.36" "172.18.0.1"
netbird-dashboard  | 172.18.0.2 - - [19/Jan/2026:12:50:02 +0000] "GET /_next/static/chunks/fd9d1056-a7f40dba7202982c.js HTTP/1.1" 200 53681 "https://netbird.[REDACTED]/" "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Mobile Safari/537.36" "172.18.0.1"
netbird-dashboard  | 172.18.0.2 - - [19/Jan/2026:12:50:02 +0000] "GET /_next/static/chunks/2117-e97b25a83d5721c6.js HTTP/1.1" 200 32002 "https://netbird.[REDACTED]/" "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Mobile Safari/537.36" "172.18.0.1"
netbird-dashboard  | 172.18.0.2 - - [19/Jan/2026:12:50:02 +0000] "GET /_next/static/chunks/1929-ce132051f7bd74bc.js HTTP/1.1" 200 27076 "https://netbird.[REDACTED]/" "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Mobile Safari/537.36" "172.18.0.1"
netbird-dashboard  | 172.18.0.2 - - [19/Jan/2026:12:50:02 +0000] "GET /_next/static/chunks/8923-75cc6fe71fec22a1.js HTTP/1.1" 200 8773 "https://netbird.[REDACTED]/" "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Mobile Safari/537.36" "172.18.0.1"
netbird-dashboard  | 172.18.0.2 - - [19/Jan/2026:12:50:02 +0000] "GET /_next/static/chunks/main-app-74805594477a2f35.js HTTP/1.1" 200 236 "https://netbird.[REDACTED]/" "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Mobile Safari/537.36" "172.18.0.1"
netbird-dashboard  | 172.18.0.2 - - [19/Jan/2026:12:50:02 +0000] "GET /_next/static/chunks/93854f56-db893758471bc0a2.js HTTP/1.1" 200 1187 "https://netbird.[REDACTED]/" "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Mobile Safari/537.36" "172.18.0.1"
netbird-dashboard  | 172.18.0.2 - - [19/Jan/2026:12:50:02 +0000] "GET /_next/static/chunks/9081a741-3f62e6076edcda64.js HTTP/1.1" 200 308 "https://netbird.[REDACTED]/" "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Mobile Safari/537.36" "172.18.0.1"
netbird-dashboard  | 172.18.0.2 - - [19/Jan/2026:12:50:02 +0000] "GET /_next/static/chunks/9383-a4d411bede693be3.js HTTP/1.1" 200 3402 "https://netbird.[REDACTED]/" "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Mobile Safari/537.36" "172.18.0.1"
netbird-dashboard  | 172.18.0.2 - - [19/Jan/2026:12:50:02 +0000] "GET /_next/static/chunks/app/page-b2d221155fc0a5f7.js HTTP/1.1" 200 807 "https://netbird.[REDACTED]/" "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Mobile Safari/537.36" "172.18.0.1"
netbird-dashboard  | 172.18.0.2 - - [19/Jan/2026:12:50:02 +0000] "GET /_next/static/chunks/7991-5a84684c84b2c774.js HTTP/1.1" 200 16332 "https://netbird.[REDACTED]/" "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Mobile Safari/537.36" "172.18.0.1"
netbird-dashboard  | 172.18.0.2 - - [19/Jan/2026:12:50:02 +0000] "GET /_next/static/chunks/5276-a47f8490171212ff.js HTTP/1.1" 200 18073 "https://netbird.[REDACTED]/" "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Mobile Safari/537.36" "172.18.0.1"
netbird-dashboard  | 172.18.0.2 - - [19/Jan/2026:12:50:02 +0000] "GET /_next/static/chunks/2508-a005cbf8a835decf.js HTTP/1.1" 200 18390 "https://netbird.[REDACTED]/" "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Mobile Safari/537.36" "172.18.0.1"
netbird-dashboard  | 172.18.0.2 - - [19/Jan/2026:12:50:02 +0000] "GET /_next/static/chunks/9912-0eabb0709a71c10b.js HTTP/1.1" 200 52260 "https://netbird.[REDACTED]/" "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Mobile Safari/537.36" "172.18.0.1"
netbird-dashboard  | 172.18.0.2 - - [19/Jan/2026:12:50:02 +0000] "GET /_next/static/chunks/3145-888aa6f5ade09902.js HTTP/1.1" 200 5290 "https://netbird.[REDACTED]/" "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Mobile Safari/537.36" "172.18.0.1"
netbird-dashboard  | 172.18.0.2 - - [19/Jan/2026:12:50:02 +0000] "GET /_next/static/chunks/app/not-found-b4aeef8e041755dc.js HTTP/1.1" 200 808 "https://netbird.[REDACTED]/" "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Mobile Safari/537.36" "172.18.0.1"
netbird-dashboard  | 172.18.0.2 - - [19/Jan/2026:12:50:02 +0000] "GET /_next/static/chunks/1779-af616240b10408c9.js HTTP/1.1" 200 6737 "https://netbird.[REDACTED]/" "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Mobile Safari/537.36" "172.18.0.1"
netbird-dashboard  | 172.18.0.2 - - [19/Jan/2026:12:50:02 +0000] "GET /_next/static/chunks/7873-ae9d1e555c5d7e7f.js HTTP/1.1" 200 40541 "https://netbird.[REDACTED]/" "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Mobile Safari/537.36" "172.18.0.1"
netbird-dashboard  | 172.18.0.2 - - [19/Jan/2026:12:50:02 +0000] "GET /_next/static/chunks/7847-57834addbf3be48a.js HTTP/1.1" 200 4044 "https://netbird.[REDACTED]/" "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Mobile Safari/537.36" "172.18.0.1"
netbird-dashboard  | 172.18.0.2 - - [19/Jan/2026:12:50:02 +0000] "GET /_next/static/chunks/106-544212185d41dbc4.js HTTP/1.1" 200 7054 "https://netbird.[REDACTED]/" "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Mobile Safari/537.36" "172.18.0.1"
netbird-dashboard  | 172.18.0.2 - - [19/Jan/2026:12:50:02 +0000] "GET /_next/static/chunks/app/layout-7fbbf9b641d5404b.js HTTP/1.1" 200 6524 "https://netbird.[REDACTED]/" "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Mobile Safari/537.36" "172.18.0.1"
netbird-dashboard  | 172.18.0.2 - - [19/Jan/2026:12:50:02 +0000] "GET /_next/static/chunks/8298.a58acf224b459d92.js HTTP/1.1" 200 1630 "https://netbird.[REDACTED]/" "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Mobile Safari/537.36" "172.18.0.1"
netbird-dashboard  | 172.18.0.2 - - [19/Jan/2026:12:50:11 +0000] "GET / HTTP/1.1" 200 2343 "-" "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Mobile Safari/537.36" "172.18.0.1"
netbird-dashboard  | 172.18.0.2 - - [19/Jan/2026:12:50:12 +0000] "GET /_next/static/media/7385e8d9d3c5518f-s.p.ttf HTTP/1.1" 200 804612 "https://netbird.[REDACTED]/" "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Mobile Safari/537.36" "172.18.0.1"
netbird-dashboard  | 172.18.0.2 - - [19/Jan/2026:12:50:12 +0000] "GET /_next/static/css/3570cb5ada83882d.css HTTP/1.1" 200 634 "https://netbird.[REDACTED]/" "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Mobile Safari/537.36" "172.18.0.1"
netbird-dashboard  | 172.18.0.2 - - [19/Jan/2026:12:50:12 +0000] "GET /_next/static/css/9a051ab3da780e64.css HTTP/1.1" 200 26258 "https://netbird.[REDACTED]/" "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Mobile Safari/537.36" "172.18.0.1"
netbird-dashboard  | 172.18.0.2 - - [19/Jan/2026:12:50:12 +0000] "GET /_next/static/chunks/webpack-87c48bb03c170010.js HTTP/1.1" 200 2707 "https://netbird.[REDACTED]/" "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Mobile Safari/537.36" "172.18.0.1"
netbird-dashboard  | 172.18.0.2 - - [19/Jan/2026:12:50:12 +0000] "GET /_next/static/chunks/fd9d1056-a7f40dba7202982c.js HTTP/1.1" 200 53681 "https://netbird.[REDACTED]/" "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Mobile Safari/537.36" "172.18.0.1"
netbird-dashboard  | 172.18.0.2 - - [19/Jan/2026:12:50:12 +0000] "GET /_next/static/chunks/main-app-74805594477a2f35.js HTTP/1.1" 200 236 "https://netbird.[REDACTED]/" "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Mobile Safari/537.36" "172.18.0.1"
netbird-dashboard  | 172.18.0.2 - - [19/Jan/2026:12:50:12 +0000] "GET /_next/static/chunks/2117-e97b25a83d5721c6.js HTTP/1.1" 200 32002 "https://netbird.[REDACTED]/" "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Mobile Safari/537.36" "172.18.0.1"
netbird-dashboard  | 172.18.0.2 - - [19/Jan/2026:12:50:12 +0000] "GET /_next/static/chunks/9081a741-3f62e6076edcda64.js HTTP/1.1" 200 308 "https://netbird.[REDACTED]/" "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Mobile Safari/537.36" "172.18.0.1"
netbird-dashboard  | 172.18.0.2 - - [19/Jan/2026:12:50:12 +0000] "GET /_next/static/chunks/1929-ce132051f7bd74bc.js HTTP/1.1" 200 27076 "https://netbird.[REDACTED]/" "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Mobile Safari/537.36" "172.18.0.1"
netbird-dashboard  | 172.18.0.2 - - [19/Jan/2026:12:50:12 +0000] "GET /_next/static/chunks/9383-a4d411bede693be3.js HTTP/1.1" 200 3402 "https://netbird.[REDACTED]/" "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Mobile Safari/537.36" "172.18.0.1"
netbird-dashboard  | 172.18.0.2 - - [19/Jan/2026:12:50:12 +0000] "GET /_next/static/chunks/app/page-b2d221155fc0a5f7.js HTTP/1.1" 200 807 "https://netbird.[REDACTED]/" "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Mobile Safari/537.36" "172.18.0.1"
netbird-dashboard  | 172.18.0.2 - - [19/Jan/2026:12:50:12 +0000] "GET /_next/static/chunks/93854f56-db893758471bc0a2.js HTTP/1.1" 200 1187 "https://netbird.[REDACTED]/" "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Mobile Safari/537.36" "172.18.0.1"
netbird-dashboard  | 172.18.0.2 - - [19/Jan/2026:12:50:12 +0000] "GET /_next/static/chunks/106-544212185d41dbc4.js HTTP/1.1" 200 7054 "https://netbird.[REDACTED]/" "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Mobile Safari/537.36" "172.18.0.1"
netbird-dashboard  | 172.18.0.2 - - [19/Jan/2026:12:50:12 +0000] "GET /_next/static/chunks/2508-a005cbf8a835decf.js HTTP/1.1" 200 18390 "https://netbird.[REDACTED]/" "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Mobile Safari/537.36" "172.18.0.1"
netbird-dashboard  | 172.18.0.2 - - [19/Jan/2026:12:50:12 +0000] "GET /_next/static/chunks/9912-0eabb0709a71c10b.js HTTP/1.1" 200 52260 "https://netbird.[REDACTED]/" "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Mobile Safari/537.36" "172.18.0.1"
netbird-dashboard  | 172.18.0.2 - - [19/Jan/2026:12:50:12 +0000] "GET /_next/static/chunks/3145-888aa6f5ade09902.js HTTP/1.1" 200 5290 "https://netbird.[REDACTED]/" "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Mobile Safari/537.36" "172.18.0.1"
netbird-dashboard  | 172.18.0.2 - - [19/Jan/2026:12:50:12 +0000] "GET /_next/static/chunks/7991-5a84684c84b2c774.js HTTP/1.1" 200 16332 "https://netbird.[REDACTED]/" "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Mobile Safari/537.36" "172.18.0.1"
netbird-dashboard  | 172.18.0.2 - - [19/Jan/2026:12:50:12 +0000] "GET /_next/static/chunks/5276-a47f8490171212ff.js HTTP/1.1" 200 18073 "https://netbird.[REDACTED]/" "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Mobile Safari/537.36" "172.18.0.1"
netbird-dashboard  | 172.18.0.2 - - [19/Jan/2026:12:50:12 +0000] "GET /_next/static/chunks/8923-75cc6fe71fec22a1.js HTTP/1.1" 200 8773 "https://netbird.[REDACTED]/" "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Mobile Safari/537.36" "172.18.0.1"
netbird-dashboard  | 172.18.0.2 - - [19/Jan/2026:12:50:12 +0000] "GET /_next/static/chunks/1779-af616240b10408c9.js HTTP/1.1" 200 6737 "https://netbird.[REDACTED]/" "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Mobile Safari/537.36" "172.18.0.1"
netbird-dashboard  | 172.18.0.2 - - [19/Jan/2026:12:50:12 +0000] "GET /_next/static/chunks/7873-ae9d1e555c5d7e7f.js HTTP/1.1" 200 40541 "https://netbird.[REDACTED]/" "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Mobile Safari/537.36" "172.18.0.1"
netbird-dashboard  | 172.18.0.2 - - [19/Jan/2026:12:50:12 +0000] "GET /_next/static/chunks/7847-57834addbf3be48a.js HTTP/1.1" 200 4044 "https://netbird.[REDACTED]/" "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Mobile Safari/537.36" "172.18.0.1"
netbird-dashboard  | 172.18.0.2 - - [19/Jan/2026:12:50:12 +0000] "GET /_next/static/chunks/app/not-found-b4aeef8e041755dc.js HTTP/1.1" 200 808 "https://netbird.[REDACTED]/" "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Mobile Safari/537.36" "172.18.0.1"
netbird-dashboard  | 172.18.0.2 - - [19/Jan/2026:12:50:12 +0000] "GET /_next/static/chunks/app/layout-7fbbf9b641d5404b.js HTTP/1.1" 200 6524 "https://netbird.[REDACTED]/" "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Mobile Safari/537.36" "172.18.0.1"
netbird-dashboard  | 172.18.0.2 - - [19/Jan/2026:12:50:12 +0000] "GET /_next/static/chunks/8298.a58acf224b459d92.js HTTP/1.1" 200 1630 "https://netbird.[REDACTED]/" "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Mobile Safari/537.36" "172.18.0.1"
netbird-dashboard  | 172.18.0.2 - - [19/Jan/2026:12:50:12 +0000] "GET /favicon.ico HTTP/1.1" 200 2031 "https://netbird.[REDACTED]/" "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Mobile Safari/537.36" "172.18.0.1"
netbird-dashboard  | 172.18.0.2 - - [19/Jan/2026:12:53:48 +0000] "GET / HTTP/1.1" 200 2343 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36 Edg/90.0.818.46" "1.2.3.42"
netbird-dashboard  | 172.18.0.2 - - [19/Jan/2026:13:00:04 +0000] "POST / HTTP/1.1" 405 552 "-" "Mozilla/5.0 (X11; CrOS x86_64 14541.0.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36" "1.2.3.43"
netbird-dashboard  | 172.18.0.2 - - [19/Jan/2026:13:00:04 +0000] "POST /_next HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36" "1.2.3.43"
netbird-dashboard  | 172.18.0.2 - - [19/Jan/2026:13:00:04 +0000] "POST /api HTTP/1.1" 404 2378 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36" "1.2.3.43"
netbird-dashboard  | 172.18.0.2 - - [19/Jan/2026:13:00:04 +0000] "POST /_next/server HTTP/1.1" 404 2378 "-" "Mozilla/5.0 (X11; CrOS x86_64 14541.0.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36" "1.2.3.43"
netbird-dashboard  | 172.18.0.2 - - [19/Jan/2026:13:00:04 +0000] "POST /app HTTP/1.1" 404 2378 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Edg/134.0.0.0" "1.2.3.43"
netbird-dashboard  | 172.18.0.2 - - [19/Jan/2026:13:01:00 +0000] "GET / HTTP/1.1" 200 2343 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36 Edg/90.0.818.46" "1.2.3.41"
netbird-dashboard  | 172.18.0.2 - - [19/Jan/2026:13:11:31 +0000] "GET / HTTP/1.1" 200 2343 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36 Edg/90.0.818.46" "1.2.3.40"
  • coturn:
netbird-coturn  | 0: (1): INFO: System cpu num is 128
netbird-coturn  | 0: (1): INFO: System cpu num is 128
netbird-coturn  | 0: (1): INFO: System enable num is 1
netbird-coturn  | 0: (1): INFO: Configured cpu num is 2
netbird-coturn  | 0: (1): INFO: Coturn Version Coturn-4.8.0 'Gorst'
netbird-coturn  | 0: (1): INFO: Max number of open files/sockets allowed for this process: 524288
netbird-coturn  | 0: (1): INFO: Due to the open files/sockets limitation, max supported number of TURN Sessions possible is: 262000 (approximately)
netbird-coturn  | 0: (1): INFO: 
netbird-coturn  | 
netbird-coturn  | ==== Show him the instruments, Practical Frost: ====
netbird-coturn  | 
netbird-coturn  | 0: (1): INFO: OpenSSL compile-time version: OpenSSL 3.5.4 30 Sep 2025 (0x30500040)
netbird-coturn  | 0: (1): INFO: TLS 1.2 supported
netbird-coturn  | 0: (1): INFO: TLS 1.3 supported
netbird-coturn  | 0: (1): INFO: DTLS 1.2 supported
netbird-coturn  | 0: (1): INFO: TURN/STUN ALPN supported
netbird-coturn  | 0: (1): INFO: Third-party authorization (oAuth) supported
netbird-coturn  | 0: (1): INFO: GCM (AEAD) supported
netbird-coturn  | 0: (1): INFO: SQLite supported, default database location is /var/lib/coturn/turndb
netbird-coturn  | 0: (1): INFO: Redis supported
netbird-coturn  | 0: (1): INFO: PostgreSQL supported
netbird-coturn  | 0: (1): INFO: MySQL supported
netbird-coturn  | 0: (1): INFO: MongoDB supported
netbird-coturn  | 0: (1): INFO: Default Net Engine version: 3 (UDP thread per CPU core)
netbird-coturn  | 0: (1): INFO: Domain name: 
netbird-coturn  | 0: (1): INFO: Default realm: wiretrustee.com
netbird-coturn  | 0: (1): WARNING: cannot find certificate file: /etc/coturn/certs/cert.pem (1)
netbird-coturn  | 0: (1): WARNING: cannot start TLS and DTLS listeners because certificate file is not set properly
netbird-coturn  | 0: (1): WARNING: cannot find private key file: /etc/coturn/private/privkey.pem (1)
netbird-coturn  | 0: (1): WARNING: cannot start TLS and DTLS listeners because private key file is not set properly
netbird-coturn  | 0: (1): INFO: Certificate file found: /etc/coturn/certs/cert.pem
netbird-coturn  | 0: (1): INFO: Private key file found: /etc/coturn/private/privkey.pem
netbird-coturn  | 0: (1): WARNING: NO EXPLICIT LISTENER ADDRESS(ES) ARE CONFIGURED
netbird-coturn  | 0: (1): INFO: ===========Discovering listener addresses: =========
netbird-coturn  | 0: (1): INFO: Listener address to use: 127.0.0.1
netbird-coturn  | 0: (1): INFO: Listener address to use: 1.2.2.1
netbird-coturn  | 0: (1): INFO: Listener address to use: 10.0.0.1
netbird-coturn  | 0: (1): INFO: Listener address to use: 172.17.0.1
netbird-coturn  | 0: (1): INFO: Listener address to use: 172.18.0.1
netbird-coturn  | 0: (1): INFO: Listener address to use: ::1
netbird-coturn  | 0: (1): INFO: Listener address to use: 1:2:3:4:5:6
netbird-coturn  | 0: (1): INFO: =====================================================
netbird-coturn  | 0: (1): INFO: Total: 5 'real' addresses discovered
netbird-coturn  | 0: (1): INFO: =====================================================
netbird-coturn  | 0: (1): WARNING: NO EXPLICIT RELAY ADDRESS(ES) ARE CONFIGURED
netbird-coturn  | 0: (1): INFO: ===========Discovering relay addresses: =============
netbird-coturn  | 0: (1): INFO: Relay address to use: 1.2.2.1
netbird-coturn  | 0: (1): INFO: Relay address to use: 10.0.0.1
netbird-coturn  | 0: (1): INFO: Relay address to use: 172.17.0.1
netbird-coturn  | 0: (1): INFO: Relay address to use: 172.18.0.1
netbird-coturn  | 0: (1): INFO: Relay address to use: 1:2:3:4:5:6
netbird-coturn  | 0: (1): INFO: =====================================================
netbird-coturn  | 0: (1): INFO: Total: 5 relay addresses discovered
netbird-coturn  | 0: (1): INFO: =====================================================
netbird-coturn  | 0: (1): INFO: pid file created: /var/tmp/turnserver.pid
netbird-coturn  | 0: (1): INFO: IO method: epoll (with changelist)
netbird-coturn  | 0: (1): INFO: RFC5780 disabled! /NAT behavior discovery/
netbird-coturn  | 0: (1): INFO: Wait for relay ports initialization...
netbird-coturn  | 0: (1): INFO:   relay 1.2.2.1 initialization...
netbird-coturn  | 0: (1): INFO:   relay 1.2.2.1 initialization done
netbird-coturn  | 0: (1): INFO:   relay 10.0.0.1 initialization...
netbird-coturn  | 0: (1): INFO:   relay 10.0.0.1 initialization done
netbird-coturn  | 0: (1): INFO:   relay 172.17.0.1 initialization...
netbird-coturn  | 0: (1): INFO:   relay 172.17.0.1 initialization done
netbird-coturn  | 0: (1): INFO:   relay 172.18.0.1 initialization...
netbird-coturn  | 0: (1): INFO:   relay 172.18.0.1 initialization done
netbird-coturn  | 0: (1): INFO:   relay 1:2:3:4:5:6 initialization...
netbird-coturn  | 0: (1): INFO:   relay 1:2:3:4:5:6 initialization done
netbird-coturn  | 0: (1): INFO: Relay ports initialization done
netbird-coturn  | 0: (1): INFO: Total General servers: 2
netbird-coturn  | 7: (10): DEBUG: turn server id=1 created
netbird-coturn  | 7: (1): INFO: Total auth threads: 3
netbird-coturn  | 7: (9): DEBUG: turn server id=0 created
netbird-coturn  | 7: (1): INFO: prometheus collector disabled, not started
  • relay:
netbird-relay  | 2026-01-19T12:18:12Z INFO relay/cmd/root.go:230: server will be available on: rels://netbird.[REDACTED]:443
netbird-relay  | 2026-01-19T12:18:12Z INFO relay/cmd/root.go:223: running metrics server: :9090/metrics
netbird-relay  | 2026-01-19T12:18:12Z WARN relay/server/server.go:74: Not starting QUIC listener: valid TLS config is required for QUIC listener
netbird-relay  | 2026-01-19T12:18:12Z INFO relay/server/listener/ws/listener.go:44: WS server listening address: :80
netbird-relay  | 2026-01-19T12:18:12Z INFO relay/healthcheck/healthcheck.go:76: starting healthcheck server on: http://localhost:9000/health
netbird-relay  | 2026-01-19T12:18:51Z INFO relay/server/listener/ws/listener.go:105: WS client connected from: 172.18.0.2:43260
netbird-relay  | 2026-01-19T12:18:51Z INFO [peer_id: sha-bW[REDACTED]=] relay/server/relay.go:139: peer connected from: 172.18.0.2:43260
  • signal:
netbird-signal  | 2026-01-19T12:18:12Z INFO signal/cmd/run.go:214: running without TLS
netbird-signal  | 2026-01-19T12:18:12Z INFO signal/cmd/run.go:141: running HTTP server with WebSocket proxy (no TLS): [::]:80
netbird-signal  | 2026-01-19T12:18:12Z INFO signal/cmd/run.go:161: running gRPC backward compatibility server: [::]:10000
netbird-signal  | 2026-01-19T12:18:12Z INFO signal/cmd/run.go:164: signal server version 0.63.0
netbird-signal  | 2026-01-19T12:18:12Z INFO signal/cmd/run.go:165: started Signal Service
netbird-signal  | 2026-01-19T12:18:12Z INFO signal/cmd/run.go:111: running metrics server: :9090/metrics

Screenshots

Image

Additional context

Since I'm testing, I shutdown the service and the VM hosting it last week and restarted manually today.

Have you tried these troubleshooting steps?

  • Reviewed client troubleshooting (if applicable)
  • Checked for newer NetBird versions
  • Searched for similar issues on GitHub (including closed ones)
  • Restarted the NetBird client
  • Disabled other VPN software
  • Checked firewall settings
Originally created by @helioloureiro on GitHub (Jan 19, 2026). Original GitHub issue: https://github.com/netbirdio/netbird/issues/5130 **Describe the problem** I'm not sure what is causing this, but from times to times the NetBird gets stalled on login on this image: <img width="1453" height="695" alt="Image" src="https://github.com/user-attachments/assets/6a1608e8-045a-4739-aa1c-4c48ebbfa3b6" /> Last time I just fired a `docker compose pull` and `docker compose restart` to get it back online, but now it doesn't work. Checking on the browser debug, I can see it gets stuck on this url: ```url https://netbird.[REDACTED]/oauth2/auth?client_id=netbird-dashboard&redirect_uri=https%3A%2F%2Fnetbird.[REDACTED]%2Fnb-auth&scope=openid%20profile%20email%20offline_access&response_type=code&audience=netbird-dashboard&state=k[REDACTED]&nonce=b[REDACTED]&code_challenge=X[REDACTED]&code_challenge_method=S256 ``` If I try to `curl` this url, I just get stalled. No answer is sent back (and probably because of that I don't see anything on caddy logs). I just noticed the follow error long on `management`: ```log netbird-management | 2026-01-19T12:18:12Z ERRO [keysLocation: http://localhost:80/oauth2/keys] shared/auth/jwt/validator.go:76: could not get keys from location: Get "http://localhost:80/oauth2/keys": dial tcp [::1]:80: connect: connection refused ``` **To Reproduce** Not sure because I don't know what triggered this behavior. I've configured IDP to Microsoft Entra ID. **Expected behavior** To open the dashboard for login. **Are you using NetBird Cloud?** No. Self-hosted. **NetBird version** From `docker compose images`: ```log CONTAINER REPOSITORY TAG PLATFORM IMAGE ID SIZE CREATED netbird-caddy caddy latest linux/amd64 2adb640cdc0c 22.5MB 2 days ago netbird-coturn coturn/coturn latest linux/amd64 5de3fc6be2da 45.4MB 12 days ago netbird-dashboard netbirdio/dashboard latest linux/amd64 65fe33f2c10b 46.3MB 4 hours ago netbird-management netbirdio/management latest linux/amd64 7a6d50e8bb17 88.6MB 2 days ago netbird-relay netbirdio/relay latest linux/amd64 d8ebbe94e482 15.9MB 2 days ago netbird-signal netbirdio/signal latest linux/amd64 4ab388acfe9a 16.1MB 2 days ago ``` **Is any other VPN software installed?** No. **Debug output** - management: ```log netbird-management | 2026-01-19T12:18:11Z INFO management/cmd/management.go:306: running with the embedded IdP: https://netbird.[REDACTED]/oauth2 netbird-management | 2026-01-19T12:18:11Z INFO management/cmd/management.go:309: Relay addresses: [rels://netbird.[REDACTED]:443] netbird-management | 2026-01-19T12:18:12Z INFO management/server/store/store.go:292: using SQLite store engine netbird-management | 2026-01-19T12:18:12Z INFO management/server/store/sql_store.go:98: Setting transaction timeout to 5m0s netbird-management | 2026-01-19T12:18:12Z INFO management/server/store/sql_store.go:112: Set max open db connections to 1, max idle to 1, max lifetime to 1h0m0s, max idle time to 3m0s netbird-management | 2026-01-19T12:18:12Z INFO management/server/migration/migration.go:263: No plain setup keys found in table setup_keys, no migration needed netbird-management | 2026-01-19T12:18:12Z INFO management/server/migration/migration.go:301: Migration of plain setup key to hashed setup key completed netbird-management | 2026-01-19T12:18:12Z INFO management/server/migration/migration.go:344: No rows with empty enabled found in table network_resources, no migration needed netbird-management | 2026-01-19T12:18:12Z INFO management/server/migration/migration.go:358: Migration of empty enabled to default value in table network_resources completed netbird-management | 2026-01-19T12:18:12Z INFO management/server/migration/migration.go:344: No rows with empty enabled found in table network_routers, no migration needed netbird-management | 2026-01-19T12:18:12Z INFO management/server/migration/migration.go:358: Migration of empty enabled to default value in table network_routers completed netbird-management | 2026-01-19T12:18:12Z INFO management/server/migration/migration.go:344: No rows with empty name found in table users, no migration needed netbird-management | 2026-01-19T12:18:12Z INFO management/server/migration/migration.go:358: Migration of empty name to default value in table users completed netbird-management | 2026-01-19T12:18:12Z INFO management/server/migration/migration.go:344: No rows with empty email found in table users, no migration needed netbird-management | 2026-01-19T12:18:12Z INFO management/server/migration/migration.go:358: Migration of empty email to default value in table users completed netbird-management | 2026-01-19T12:18:12Z INFO management/server/migration/migration.go:399: index idx_account_ip already exists on table peers netbird-management | 2026-01-19T12:18:12Z INFO management/server/migration/migration.go:399: index idx_account_dnslabel already exists on table peers netbird-management | 2026-01-19T12:18:12Z INFO management/server/migration/migration.go:399: index idx_peers_key_unique already exists on table peers netbird-management | 2026-01-19T12:18:12Z INFO management/internals/server/modules.go:45: geolocation service has been initialized from /var/lib/netbird/ netbird-management | 2026-01-19T12:18:12Z INFO management/server/telemetry/app_metrics.go:193: enabled application metrics and exposing on http://0.0.0.0:9090 netbird-management | 2026-01-19T12:18:12Z WARN management/internals/server/boot.go:108: TrustedPeers are configured to default value '0.0.0.0/0', '::/0'. This allows connection IP spoofing. netbird-management | 2026-01-19T12:18:12Z INFO management/server/account_request_buffer.go:45: set account request buffer interval to 100ms netbird-management | 2026-01-19T12:18:12Z INFO management/server/activity/store/sql_store.go:261: using sqlite as activity event store engine netbird-management | 2026-01-19T12:18:12Z INFO management/server/activity/store/sql_store.go:290: Set max open db connections to 1, max idle to 1, max lifetime to 1h0m0s, max idle time to 3m0s netbird-management | 2026-01-19T12:18:12Z INFO management/server/migration/migration.go:344: No rows with empty name found in table deleted_users, no migration needed netbird-management | 2026-01-19T12:18:12Z INFO management/server/migration/migration.go:358: Migration of empty name to default value in table deleted_users completed netbird-management | 2026-01-19T12:18:12Z INFO management/server/migration/migration.go:344: No rows with empty enc_algo found in table deleted_users, no migration needed netbird-management | 2026-01-19T12:18:12Z INFO management/server/migration/migration.go:358: Migration of empty enc_algo to default value in table deleted_users completed netbird-management | 2026-01-19T12:18:12Z WARN management/internals/controllers/network_map/controller/controller.go:84: failed to parse NB_EXPERIMENT_NETWORK_MAP, using default value false: strconv.ParseBool: parsing "": invalid syntax netbird-management | 2026-01-19T12:18:12Z INFO management/server/idp/embedded.go:200: embedded Dex IDP initialized with issuer: https://netbird.[REDACTED]/oauth2 netbird-management | 2026-01-19T12:18:12Z INFO management/server/account_request_buffer.go:45: set account request buffer interval to 100ms netbird-management | 2026-01-19T12:18:12Z WARN management/internals/controllers/network_map/controller/controller.go:626: failed to parse peer update interval, using default value 1ms: strconv.Atoi: parsing "": invalid syntax netbird-management | 2026-01-19T12:18:12Z INFO management/internals/controllers/network_map/controller/controller.go:642: set peer update buffer interval to 1ms netbird-management | 2026-01-19T12:18:12Z INFO management/server/account.go:234: single account mode enabled, accounts number 1 netbird-management | 2026-01-19T12:18:12Z ERRO [keysLocation: http://localhost:80/oauth2/keys] shared/auth/jwt/validator.go:76: could not get keys from location: Get "http://localhost:80/oauth2/keys": dial tcp [::1]:80: connect: connection refused netbird-management | 2026-01-19T12:18:12Z INFO management/internals/server/server.go:149: running gRPC backward compatibility server: [::]:33073 netbird-management | 2026-01-19T12:18:12Z INFO management/internals/server/server.go:187: management server version 0.63.0 netbird-management | 2026-01-19T12:18:12Z INFO management/internals/server/server.go:188: running HTTP server and gRPC server on the same port: [::]:80 netbird-management | 2026-01-19T12:18:14Z WARN [requestID: d5n221mjm9hs73aom2bg, accountID: UNKNOWN, peerID: fxnf9gBHO0KKsripRM9vEl8S07eNZLoLqkVWrm7iDCk=, context: GRPC] management/internals/shared/grpc/server.go:606: failed logging in peer f[REDACTED]k=: no peer auth method provided, please use a setup key or interactive SSO login ``` - dashboard: ```log netbird-dashboard | 172.18.0.2 - - [19/Jan/2026:12:50:02 +0000] "GET / HTTP/1.1" 200 2343 "-" "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Mobile Safari/537.36" "172.18.0.1" netbird-dashboard | 172.18.0.2 - - [19/Jan/2026:12:50:02 +0000] "GET /_next/static/media/7385e8d9d3c5518f-s.p.ttf HTTP/1.1" 200 804612 "https://netbird.[REDACTED]/" "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Mobile Safari/537.36" "172.18.0.1" netbird-dashboard | 172.18.0.2 - - [19/Jan/2026:12:50:02 +0000] "GET /_next/static/css/3570cb5ada83882d.css HTTP/1.1" 200 634 "https://netbird.[REDACTED]/" "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Mobile Safari/537.36" "172.18.0.1" netbird-dashboard | 172.18.0.2 - - [19/Jan/2026:12:50:02 +0000] "GET /_next/static/css/9a051ab3da780e64.css HTTP/1.1" 200 26258 "https://netbird.[REDACTED]/" "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Mobile Safari/537.36" "172.18.0.1" netbird-dashboard | 172.18.0.2 - - [19/Jan/2026:12:50:02 +0000] "GET /_next/static/chunks/webpack-87c48bb03c170010.js HTTP/1.1" 200 2707 "https://netbird.[REDACTED]/" "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Mobile Safari/537.36" "172.18.0.1" netbird-dashboard | 172.18.0.2 - - [19/Jan/2026:12:50:02 +0000] "GET /_next/static/chunks/fd9d1056-a7f40dba7202982c.js HTTP/1.1" 200 53681 "https://netbird.[REDACTED]/" "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Mobile Safari/537.36" "172.18.0.1" netbird-dashboard | 172.18.0.2 - - [19/Jan/2026:12:50:02 +0000] "GET /_next/static/chunks/2117-e97b25a83d5721c6.js HTTP/1.1" 200 32002 "https://netbird.[REDACTED]/" "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Mobile Safari/537.36" "172.18.0.1" netbird-dashboard | 172.18.0.2 - - [19/Jan/2026:12:50:02 +0000] "GET /_next/static/chunks/1929-ce132051f7bd74bc.js HTTP/1.1" 200 27076 "https://netbird.[REDACTED]/" "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Mobile Safari/537.36" "172.18.0.1" netbird-dashboard | 172.18.0.2 - - [19/Jan/2026:12:50:02 +0000] "GET /_next/static/chunks/8923-75cc6fe71fec22a1.js HTTP/1.1" 200 8773 "https://netbird.[REDACTED]/" "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Mobile Safari/537.36" "172.18.0.1" netbird-dashboard | 172.18.0.2 - - [19/Jan/2026:12:50:02 +0000] "GET /_next/static/chunks/main-app-74805594477a2f35.js HTTP/1.1" 200 236 "https://netbird.[REDACTED]/" "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Mobile Safari/537.36" "172.18.0.1" netbird-dashboard | 172.18.0.2 - - [19/Jan/2026:12:50:02 +0000] "GET /_next/static/chunks/93854f56-db893758471bc0a2.js HTTP/1.1" 200 1187 "https://netbird.[REDACTED]/" "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Mobile Safari/537.36" "172.18.0.1" netbird-dashboard | 172.18.0.2 - - [19/Jan/2026:12:50:02 +0000] "GET /_next/static/chunks/9081a741-3f62e6076edcda64.js HTTP/1.1" 200 308 "https://netbird.[REDACTED]/" "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Mobile Safari/537.36" "172.18.0.1" netbird-dashboard | 172.18.0.2 - - [19/Jan/2026:12:50:02 +0000] "GET /_next/static/chunks/9383-a4d411bede693be3.js HTTP/1.1" 200 3402 "https://netbird.[REDACTED]/" "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Mobile Safari/537.36" "172.18.0.1" netbird-dashboard | 172.18.0.2 - - [19/Jan/2026:12:50:02 +0000] "GET /_next/static/chunks/app/page-b2d221155fc0a5f7.js HTTP/1.1" 200 807 "https://netbird.[REDACTED]/" "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Mobile Safari/537.36" "172.18.0.1" netbird-dashboard | 172.18.0.2 - - [19/Jan/2026:12:50:02 +0000] "GET /_next/static/chunks/7991-5a84684c84b2c774.js HTTP/1.1" 200 16332 "https://netbird.[REDACTED]/" "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Mobile Safari/537.36" "172.18.0.1" netbird-dashboard | 172.18.0.2 - - [19/Jan/2026:12:50:02 +0000] "GET /_next/static/chunks/5276-a47f8490171212ff.js HTTP/1.1" 200 18073 "https://netbird.[REDACTED]/" "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Mobile Safari/537.36" "172.18.0.1" netbird-dashboard | 172.18.0.2 - - [19/Jan/2026:12:50:02 +0000] "GET /_next/static/chunks/2508-a005cbf8a835decf.js HTTP/1.1" 200 18390 "https://netbird.[REDACTED]/" "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Mobile Safari/537.36" "172.18.0.1" netbird-dashboard | 172.18.0.2 - - [19/Jan/2026:12:50:02 +0000] "GET /_next/static/chunks/9912-0eabb0709a71c10b.js HTTP/1.1" 200 52260 "https://netbird.[REDACTED]/" "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Mobile Safari/537.36" "172.18.0.1" netbird-dashboard | 172.18.0.2 - - [19/Jan/2026:12:50:02 +0000] "GET /_next/static/chunks/3145-888aa6f5ade09902.js HTTP/1.1" 200 5290 "https://netbird.[REDACTED]/" "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Mobile Safari/537.36" "172.18.0.1" netbird-dashboard | 172.18.0.2 - - [19/Jan/2026:12:50:02 +0000] "GET /_next/static/chunks/app/not-found-b4aeef8e041755dc.js HTTP/1.1" 200 808 "https://netbird.[REDACTED]/" "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Mobile Safari/537.36" "172.18.0.1" netbird-dashboard | 172.18.0.2 - - [19/Jan/2026:12:50:02 +0000] "GET /_next/static/chunks/1779-af616240b10408c9.js HTTP/1.1" 200 6737 "https://netbird.[REDACTED]/" "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Mobile Safari/537.36" "172.18.0.1" netbird-dashboard | 172.18.0.2 - - [19/Jan/2026:12:50:02 +0000] "GET /_next/static/chunks/7873-ae9d1e555c5d7e7f.js HTTP/1.1" 200 40541 "https://netbird.[REDACTED]/" "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Mobile Safari/537.36" "172.18.0.1" netbird-dashboard | 172.18.0.2 - - [19/Jan/2026:12:50:02 +0000] "GET /_next/static/chunks/7847-57834addbf3be48a.js HTTP/1.1" 200 4044 "https://netbird.[REDACTED]/" "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Mobile Safari/537.36" "172.18.0.1" netbird-dashboard | 172.18.0.2 - - [19/Jan/2026:12:50:02 +0000] "GET /_next/static/chunks/106-544212185d41dbc4.js HTTP/1.1" 200 7054 "https://netbird.[REDACTED]/" "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Mobile Safari/537.36" "172.18.0.1" netbird-dashboard | 172.18.0.2 - - [19/Jan/2026:12:50:02 +0000] "GET /_next/static/chunks/app/layout-7fbbf9b641d5404b.js HTTP/1.1" 200 6524 "https://netbird.[REDACTED]/" "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Mobile Safari/537.36" "172.18.0.1" netbird-dashboard | 172.18.0.2 - - [19/Jan/2026:12:50:02 +0000] "GET /_next/static/chunks/8298.a58acf224b459d92.js HTTP/1.1" 200 1630 "https://netbird.[REDACTED]/" "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Mobile Safari/537.36" "172.18.0.1" netbird-dashboard | 172.18.0.2 - - [19/Jan/2026:12:50:11 +0000] "GET / HTTP/1.1" 200 2343 "-" "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Mobile Safari/537.36" "172.18.0.1" netbird-dashboard | 172.18.0.2 - - [19/Jan/2026:12:50:12 +0000] "GET /_next/static/media/7385e8d9d3c5518f-s.p.ttf HTTP/1.1" 200 804612 "https://netbird.[REDACTED]/" "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Mobile Safari/537.36" "172.18.0.1" netbird-dashboard | 172.18.0.2 - - [19/Jan/2026:12:50:12 +0000] "GET /_next/static/css/3570cb5ada83882d.css HTTP/1.1" 200 634 "https://netbird.[REDACTED]/" "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Mobile Safari/537.36" "172.18.0.1" netbird-dashboard | 172.18.0.2 - - [19/Jan/2026:12:50:12 +0000] "GET /_next/static/css/9a051ab3da780e64.css HTTP/1.1" 200 26258 "https://netbird.[REDACTED]/" "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Mobile Safari/537.36" "172.18.0.1" netbird-dashboard | 172.18.0.2 - - [19/Jan/2026:12:50:12 +0000] "GET /_next/static/chunks/webpack-87c48bb03c170010.js HTTP/1.1" 200 2707 "https://netbird.[REDACTED]/" "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Mobile Safari/537.36" "172.18.0.1" netbird-dashboard | 172.18.0.2 - - [19/Jan/2026:12:50:12 +0000] "GET /_next/static/chunks/fd9d1056-a7f40dba7202982c.js HTTP/1.1" 200 53681 "https://netbird.[REDACTED]/" "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Mobile Safari/537.36" "172.18.0.1" netbird-dashboard | 172.18.0.2 - - [19/Jan/2026:12:50:12 +0000] "GET /_next/static/chunks/main-app-74805594477a2f35.js HTTP/1.1" 200 236 "https://netbird.[REDACTED]/" "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Mobile Safari/537.36" "172.18.0.1" netbird-dashboard | 172.18.0.2 - - [19/Jan/2026:12:50:12 +0000] "GET /_next/static/chunks/2117-e97b25a83d5721c6.js HTTP/1.1" 200 32002 "https://netbird.[REDACTED]/" "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Mobile Safari/537.36" "172.18.0.1" netbird-dashboard | 172.18.0.2 - - [19/Jan/2026:12:50:12 +0000] "GET /_next/static/chunks/9081a741-3f62e6076edcda64.js HTTP/1.1" 200 308 "https://netbird.[REDACTED]/" "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Mobile Safari/537.36" "172.18.0.1" netbird-dashboard | 172.18.0.2 - - [19/Jan/2026:12:50:12 +0000] "GET /_next/static/chunks/1929-ce132051f7bd74bc.js HTTP/1.1" 200 27076 "https://netbird.[REDACTED]/" "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Mobile Safari/537.36" "172.18.0.1" netbird-dashboard | 172.18.0.2 - - [19/Jan/2026:12:50:12 +0000] "GET /_next/static/chunks/9383-a4d411bede693be3.js HTTP/1.1" 200 3402 "https://netbird.[REDACTED]/" "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Mobile Safari/537.36" "172.18.0.1" netbird-dashboard | 172.18.0.2 - - [19/Jan/2026:12:50:12 +0000] "GET /_next/static/chunks/app/page-b2d221155fc0a5f7.js HTTP/1.1" 200 807 "https://netbird.[REDACTED]/" "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Mobile Safari/537.36" "172.18.0.1" netbird-dashboard | 172.18.0.2 - - [19/Jan/2026:12:50:12 +0000] "GET /_next/static/chunks/93854f56-db893758471bc0a2.js HTTP/1.1" 200 1187 "https://netbird.[REDACTED]/" "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Mobile Safari/537.36" "172.18.0.1" netbird-dashboard | 172.18.0.2 - - [19/Jan/2026:12:50:12 +0000] "GET /_next/static/chunks/106-544212185d41dbc4.js HTTP/1.1" 200 7054 "https://netbird.[REDACTED]/" "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Mobile Safari/537.36" "172.18.0.1" netbird-dashboard | 172.18.0.2 - - [19/Jan/2026:12:50:12 +0000] "GET /_next/static/chunks/2508-a005cbf8a835decf.js HTTP/1.1" 200 18390 "https://netbird.[REDACTED]/" "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Mobile Safari/537.36" "172.18.0.1" netbird-dashboard | 172.18.0.2 - - [19/Jan/2026:12:50:12 +0000] "GET /_next/static/chunks/9912-0eabb0709a71c10b.js HTTP/1.1" 200 52260 "https://netbird.[REDACTED]/" "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Mobile Safari/537.36" "172.18.0.1" netbird-dashboard | 172.18.0.2 - - [19/Jan/2026:12:50:12 +0000] "GET /_next/static/chunks/3145-888aa6f5ade09902.js HTTP/1.1" 200 5290 "https://netbird.[REDACTED]/" "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Mobile Safari/537.36" "172.18.0.1" netbird-dashboard | 172.18.0.2 - - [19/Jan/2026:12:50:12 +0000] "GET /_next/static/chunks/7991-5a84684c84b2c774.js HTTP/1.1" 200 16332 "https://netbird.[REDACTED]/" "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Mobile Safari/537.36" "172.18.0.1" netbird-dashboard | 172.18.0.2 - - [19/Jan/2026:12:50:12 +0000] "GET /_next/static/chunks/5276-a47f8490171212ff.js HTTP/1.1" 200 18073 "https://netbird.[REDACTED]/" "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Mobile Safari/537.36" "172.18.0.1" netbird-dashboard | 172.18.0.2 - - [19/Jan/2026:12:50:12 +0000] "GET /_next/static/chunks/8923-75cc6fe71fec22a1.js HTTP/1.1" 200 8773 "https://netbird.[REDACTED]/" "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Mobile Safari/537.36" "172.18.0.1" netbird-dashboard | 172.18.0.2 - - [19/Jan/2026:12:50:12 +0000] "GET /_next/static/chunks/1779-af616240b10408c9.js HTTP/1.1" 200 6737 "https://netbird.[REDACTED]/" "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Mobile Safari/537.36" "172.18.0.1" netbird-dashboard | 172.18.0.2 - - [19/Jan/2026:12:50:12 +0000] "GET /_next/static/chunks/7873-ae9d1e555c5d7e7f.js HTTP/1.1" 200 40541 "https://netbird.[REDACTED]/" "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Mobile Safari/537.36" "172.18.0.1" netbird-dashboard | 172.18.0.2 - - [19/Jan/2026:12:50:12 +0000] "GET /_next/static/chunks/7847-57834addbf3be48a.js HTTP/1.1" 200 4044 "https://netbird.[REDACTED]/" "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Mobile Safari/537.36" "172.18.0.1" netbird-dashboard | 172.18.0.2 - - [19/Jan/2026:12:50:12 +0000] "GET /_next/static/chunks/app/not-found-b4aeef8e041755dc.js HTTP/1.1" 200 808 "https://netbird.[REDACTED]/" "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Mobile Safari/537.36" "172.18.0.1" netbird-dashboard | 172.18.0.2 - - [19/Jan/2026:12:50:12 +0000] "GET /_next/static/chunks/app/layout-7fbbf9b641d5404b.js HTTP/1.1" 200 6524 "https://netbird.[REDACTED]/" "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Mobile Safari/537.36" "172.18.0.1" netbird-dashboard | 172.18.0.2 - - [19/Jan/2026:12:50:12 +0000] "GET /_next/static/chunks/8298.a58acf224b459d92.js HTTP/1.1" 200 1630 "https://netbird.[REDACTED]/" "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Mobile Safari/537.36" "172.18.0.1" netbird-dashboard | 172.18.0.2 - - [19/Jan/2026:12:50:12 +0000] "GET /favicon.ico HTTP/1.1" 200 2031 "https://netbird.[REDACTED]/" "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Mobile Safari/537.36" "172.18.0.1" netbird-dashboard | 172.18.0.2 - - [19/Jan/2026:12:53:48 +0000] "GET / HTTP/1.1" 200 2343 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36 Edg/90.0.818.46" "1.2.3.42" netbird-dashboard | 172.18.0.2 - - [19/Jan/2026:13:00:04 +0000] "POST / HTTP/1.1" 405 552 "-" "Mozilla/5.0 (X11; CrOS x86_64 14541.0.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36" "1.2.3.43" netbird-dashboard | 172.18.0.2 - - [19/Jan/2026:13:00:04 +0000] "POST /_next HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36" "1.2.3.43" netbird-dashboard | 172.18.0.2 - - [19/Jan/2026:13:00:04 +0000] "POST /api HTTP/1.1" 404 2378 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36" "1.2.3.43" netbird-dashboard | 172.18.0.2 - - [19/Jan/2026:13:00:04 +0000] "POST /_next/server HTTP/1.1" 404 2378 "-" "Mozilla/5.0 (X11; CrOS x86_64 14541.0.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36" "1.2.3.43" netbird-dashboard | 172.18.0.2 - - [19/Jan/2026:13:00:04 +0000] "POST /app HTTP/1.1" 404 2378 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Edg/134.0.0.0" "1.2.3.43" netbird-dashboard | 172.18.0.2 - - [19/Jan/2026:13:01:00 +0000] "GET / HTTP/1.1" 200 2343 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36 Edg/90.0.818.46" "1.2.3.41" netbird-dashboard | 172.18.0.2 - - [19/Jan/2026:13:11:31 +0000] "GET / HTTP/1.1" 200 2343 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36 Edg/90.0.818.46" "1.2.3.40" ``` - coturn: ```log netbird-coturn | 0: (1): INFO: System cpu num is 128 netbird-coturn | 0: (1): INFO: System cpu num is 128 netbird-coturn | 0: (1): INFO: System enable num is 1 netbird-coturn | 0: (1): INFO: Configured cpu num is 2 netbird-coturn | 0: (1): INFO: Coturn Version Coturn-4.8.0 'Gorst' netbird-coturn | 0: (1): INFO: Max number of open files/sockets allowed for this process: 524288 netbird-coturn | 0: (1): INFO: Due to the open files/sockets limitation, max supported number of TURN Sessions possible is: 262000 (approximately) netbird-coturn | 0: (1): INFO: netbird-coturn | netbird-coturn | ==== Show him the instruments, Practical Frost: ==== netbird-coturn | netbird-coturn | 0: (1): INFO: OpenSSL compile-time version: OpenSSL 3.5.4 30 Sep 2025 (0x30500040) netbird-coturn | 0: (1): INFO: TLS 1.2 supported netbird-coturn | 0: (1): INFO: TLS 1.3 supported netbird-coturn | 0: (1): INFO: DTLS 1.2 supported netbird-coturn | 0: (1): INFO: TURN/STUN ALPN supported netbird-coturn | 0: (1): INFO: Third-party authorization (oAuth) supported netbird-coturn | 0: (1): INFO: GCM (AEAD) supported netbird-coturn | 0: (1): INFO: SQLite supported, default database location is /var/lib/coturn/turndb netbird-coturn | 0: (1): INFO: Redis supported netbird-coturn | 0: (1): INFO: PostgreSQL supported netbird-coturn | 0: (1): INFO: MySQL supported netbird-coturn | 0: (1): INFO: MongoDB supported netbird-coturn | 0: (1): INFO: Default Net Engine version: 3 (UDP thread per CPU core) netbird-coturn | 0: (1): INFO: Domain name: netbird-coturn | 0: (1): INFO: Default realm: wiretrustee.com netbird-coturn | 0: (1): WARNING: cannot find certificate file: /etc/coturn/certs/cert.pem (1) netbird-coturn | 0: (1): WARNING: cannot start TLS and DTLS listeners because certificate file is not set properly netbird-coturn | 0: (1): WARNING: cannot find private key file: /etc/coturn/private/privkey.pem (1) netbird-coturn | 0: (1): WARNING: cannot start TLS and DTLS listeners because private key file is not set properly netbird-coturn | 0: (1): INFO: Certificate file found: /etc/coturn/certs/cert.pem netbird-coturn | 0: (1): INFO: Private key file found: /etc/coturn/private/privkey.pem netbird-coturn | 0: (1): WARNING: NO EXPLICIT LISTENER ADDRESS(ES) ARE CONFIGURED netbird-coturn | 0: (1): INFO: ===========Discovering listener addresses: ========= netbird-coturn | 0: (1): INFO: Listener address to use: 127.0.0.1 netbird-coturn | 0: (1): INFO: Listener address to use: 1.2.2.1 netbird-coturn | 0: (1): INFO: Listener address to use: 10.0.0.1 netbird-coturn | 0: (1): INFO: Listener address to use: 172.17.0.1 netbird-coturn | 0: (1): INFO: Listener address to use: 172.18.0.1 netbird-coturn | 0: (1): INFO: Listener address to use: ::1 netbird-coturn | 0: (1): INFO: Listener address to use: 1:2:3:4:5:6 netbird-coturn | 0: (1): INFO: ===================================================== netbird-coturn | 0: (1): INFO: Total: 5 'real' addresses discovered netbird-coturn | 0: (1): INFO: ===================================================== netbird-coturn | 0: (1): WARNING: NO EXPLICIT RELAY ADDRESS(ES) ARE CONFIGURED netbird-coturn | 0: (1): INFO: ===========Discovering relay addresses: ============= netbird-coturn | 0: (1): INFO: Relay address to use: 1.2.2.1 netbird-coturn | 0: (1): INFO: Relay address to use: 10.0.0.1 netbird-coturn | 0: (1): INFO: Relay address to use: 172.17.0.1 netbird-coturn | 0: (1): INFO: Relay address to use: 172.18.0.1 netbird-coturn | 0: (1): INFO: Relay address to use: 1:2:3:4:5:6 netbird-coturn | 0: (1): INFO: ===================================================== netbird-coturn | 0: (1): INFO: Total: 5 relay addresses discovered netbird-coturn | 0: (1): INFO: ===================================================== netbird-coturn | 0: (1): INFO: pid file created: /var/tmp/turnserver.pid netbird-coturn | 0: (1): INFO: IO method: epoll (with changelist) netbird-coturn | 0: (1): INFO: RFC5780 disabled! /NAT behavior discovery/ netbird-coturn | 0: (1): INFO: Wait for relay ports initialization... netbird-coturn | 0: (1): INFO: relay 1.2.2.1 initialization... netbird-coturn | 0: (1): INFO: relay 1.2.2.1 initialization done netbird-coturn | 0: (1): INFO: relay 10.0.0.1 initialization... netbird-coturn | 0: (1): INFO: relay 10.0.0.1 initialization done netbird-coturn | 0: (1): INFO: relay 172.17.0.1 initialization... netbird-coturn | 0: (1): INFO: relay 172.17.0.1 initialization done netbird-coturn | 0: (1): INFO: relay 172.18.0.1 initialization... netbird-coturn | 0: (1): INFO: relay 172.18.0.1 initialization done netbird-coturn | 0: (1): INFO: relay 1:2:3:4:5:6 initialization... netbird-coturn | 0: (1): INFO: relay 1:2:3:4:5:6 initialization done netbird-coturn | 0: (1): INFO: Relay ports initialization done netbird-coturn | 0: (1): INFO: Total General servers: 2 netbird-coturn | 7: (10): DEBUG: turn server id=1 created netbird-coturn | 7: (1): INFO: Total auth threads: 3 netbird-coturn | 7: (9): DEBUG: turn server id=0 created netbird-coturn | 7: (1): INFO: prometheus collector disabled, not started ``` - relay: ```log netbird-relay | 2026-01-19T12:18:12Z INFO relay/cmd/root.go:230: server will be available on: rels://netbird.[REDACTED]:443 netbird-relay | 2026-01-19T12:18:12Z INFO relay/cmd/root.go:223: running metrics server: :9090/metrics netbird-relay | 2026-01-19T12:18:12Z WARN relay/server/server.go:74: Not starting QUIC listener: valid TLS config is required for QUIC listener netbird-relay | 2026-01-19T12:18:12Z INFO relay/server/listener/ws/listener.go:44: WS server listening address: :80 netbird-relay | 2026-01-19T12:18:12Z INFO relay/healthcheck/healthcheck.go:76: starting healthcheck server on: http://localhost:9000/health netbird-relay | 2026-01-19T12:18:51Z INFO relay/server/listener/ws/listener.go:105: WS client connected from: 172.18.0.2:43260 netbird-relay | 2026-01-19T12:18:51Z INFO [peer_id: sha-bW[REDACTED]=] relay/server/relay.go:139: peer connected from: 172.18.0.2:43260 ``` - signal: ```log netbird-signal | 2026-01-19T12:18:12Z INFO signal/cmd/run.go:214: running without TLS netbird-signal | 2026-01-19T12:18:12Z INFO signal/cmd/run.go:141: running HTTP server with WebSocket proxy (no TLS): [::]:80 netbird-signal | 2026-01-19T12:18:12Z INFO signal/cmd/run.go:161: running gRPC backward compatibility server: [::]:10000 netbird-signal | 2026-01-19T12:18:12Z INFO signal/cmd/run.go:164: signal server version 0.63.0 netbird-signal | 2026-01-19T12:18:12Z INFO signal/cmd/run.go:165: started Signal Service netbird-signal | 2026-01-19T12:18:12Z INFO signal/cmd/run.go:111: running metrics server: :9090/metrics ``` **Screenshots** <img width="1453" height="695" alt="Image" src="https://github.com/user-attachments/assets/6a1608e8-045a-4739-aa1c-4c48ebbfa3b6" /> **Additional context** Since I'm testing, I shutdown the service and the VM hosting it last week and restarted manually today. **Have you tried these troubleshooting steps?** - [ ] Reviewed [client troubleshooting](https://docs.netbird.io/how-to/troubleshooting-client) (if applicable) - [X] Checked for newer NetBird versions - [X] Searched for similar issues on GitHub (including closed ones) - [ ] Restarted the NetBird client - [x] Disabled other VPN software - [X] Checked firewall settings
saavagebueno added the triage-needed label 2026-08-05 01:24:10 -04:00
Author
Owner

@konklon commented on GitHub (Jan 19, 2026):

I am experiencing the exact sam login/dashboard hang issues described in this thread. My setup is a self-hosted NetBird v0.63 using the Embedded IdP.

In addition to the freezing, I am also stuck in a continuous consent loop. Every time I choose to log in via Microsoft Entra ID (Azure AD), I am prompted with the "Permissions requested" screen (see screenshot below). This happens even after I have granted admin consent for the entire organization and checked the "Consent on behalf of your organization" box.

It seems the consent is not being persisted, or the session isn't being correctly established between Entra ID and the NetBird Embedded IdP, leading to the dashboard hanging.

Is there a specific configuration or a fix for this OIDC flow with Entra ID?

Image
<!-- gh-comment-id:3768679871 --> @konklon commented on GitHub (Jan 19, 2026): I am experiencing the exact sam login/dashboard hang issues described in this thread. My setup is a self-hosted NetBird v0.63 using the Embedded IdP. In addition to the freezing, I am also stuck in a continuous consent loop. Every time I choose to log in via Microsoft Entra ID (Azure AD), I am prompted with the "Permissions requested" screen (see screenshot below). This happens even after I have granted admin consent for the entire organization and checked the "Consent on behalf of your organization" box. It seems the consent is not being persisted, or the session isn't being correctly established between Entra ID and the NetBird Embedded IdP, leading to the dashboard hanging. Is there a specific configuration or a fix for this OIDC flow with Entra ID? <img width="622" height="864" alt="Image" src="https://github.com/user-attachments/assets/ed8574ea-b223-430a-9adb-51edafac2c1c" />
Author
Owner

@helioloureiro commented on GitHub (Jan 20, 2026):

I got it back online.

Image

I was reading the troubleshooting then I got this line:

For SQLite databases, you may need to run integrity checks.

So I found the location of database files (since I'm using for now sqlite3) using this command:

docker volume inspect netbird_netbird_management | jq '.[0].Mountpoint'

I got into all DB file like this:

sqlite3 /var/lib/docker/volumes/netbird_netbird_management/_data/store.db

and run the following command:

pragma integrity_check;

Note: I run it with service stopped.

After that, I just restarted service and got it back online.

<!-- gh-comment-id:3772044781 --> @helioloureiro commented on GitHub (Jan 20, 2026): I got it back online. <img width="1162" height="766" alt="Image" src="https://github.com/user-attachments/assets/5d00f23b-1abd-4f25-8725-bc5928670f64" /> I was reading the troubleshooting then I got this line: ```quote For SQLite databases, you may need to run integrity checks. ``` So I found the location of database files (since I'm using for now sqlite3) using this command: ```shell docker volume inspect netbird_netbird_management | jq '.[0].Mountpoint' ``` I got into all DB file like this: ```shell sqlite3 /var/lib/docker/volumes/netbird_netbird_management/_data/store.db ``` and run the following command: ```sql pragma integrity_check; ``` __Note:__ I run it with service stopped. After that, I just restarted service and got it back online.
Author
Owner

@helioloureiro commented on GitHub (Jan 20, 2026):

@konklon I'm waiting your feedback. Otherwise I will close this ticket since my case is solved (but it should have better logging information, which would be a new feature requirement).

<!-- gh-comment-id:3773224711 --> @helioloureiro commented on GitHub (Jan 20, 2026): @konklon I'm waiting your feedback. Otherwise I will close this ticket since my case is solved (but it should have better logging information, which would be a new feature requirement).
Author
Owner

@hjaltioj commented on GitHub (Jan 20, 2026):

i have the same problem as @konklon and i tried pragma integrity_check; as you described @helioloureiro but it didnt work for me :(

<!-- gh-comment-id:3775249625 --> @hjaltioj commented on GitHub (Jan 20, 2026): i have the same problem as @konklon and i tried pragma integrity_check; as you described @helioloureiro but it didnt work for me :(
Author
Owner

@helioloureiro commented on GitHub (Jan 21, 2026):

Perhaps it would be good if you both could add your logs.

<!-- gh-comment-id:3776772535 --> @helioloureiro commented on GitHub (Jan 21, 2026): Perhaps it would be good if you both could add your logs.
Author
Owner

@helioloureiro commented on GitHub (Jan 21, 2026):

And today, out of now where...

Image

I had to run:

docker compose pull
docker compose restart

in order to get the dashboard. Is that supposed to happen? Enforced upgrades?

<!-- gh-comment-id:3778033842 --> @helioloureiro commented on GitHub (Jan 21, 2026): And today, out of now where... <img width="1762" height="877" alt="Image" src="https://github.com/user-attachments/assets/540b3790-12e8-4061-a990-197ff1de49e0" /> I had to run: ```shell docker compose pull docker compose restart ``` in order to get the dashboard. Is that supposed to happen? Enforced upgrades?
Author
Owner

@helioloureiro commented on GitHub (Jan 23, 2026):

And again today...

Image
<!-- gh-comment-id:3790531161 --> @helioloureiro commented on GitHub (Jan 23, 2026): And again today... <img width="1603" height="829" alt="Image" src="https://github.com/user-attachments/assets/eda39bf5-1b83-4902-ab56-cb1797f5cac6" />
Author
Owner

@skabbes commented on GitHub (Jan 24, 2026):

I have been encountering the same issue, docker compose down && docker compose up fixes the issue for me each time, but it seems to recur almost daily.

(It is as-if the management server times out or something).

<!-- gh-comment-id:3795646857 --> @skabbes commented on GitHub (Jan 24, 2026): I have been encountering the same issue, `docker compose down && docker compose up` fixes the issue for me each time, but it seems to recur almost daily. (It is as-if the management server times out or something).
Author
Owner

@heymoe commented on GitHub (Jan 25, 2026):

Just wanted to throw in my $0.02 on this issue too. I'm also experience this same issue. I have a fresh self-hosted install running 0.64.1 and have it configured to use Authentik as an external iDP so I can login using Authentik or email+password with the internal iDP.

The last time this stalled screen happened to me was when I returned to the browser that that I was already logged into NetBird with which was still showing the peers list and I hit the browser refresh button and that's when the stalled screen that other above posted pops up.

Clicking refresh again doesn't resolve the issue nor does doing a F12+empty cache and hard reload. In the paste I found doing a "docker compose down" and then a "docker compose up -d" would get things going again but this most recent time I tried something different.

I manually change the URL in the browser to loaded a oauth2 URL that my browser had in its history "https://netbird.domain.com/oauth2/auth?client_id=netbird-dashboard&redirect_uri..." which pulled up the login screen. I selected the Authentik link and successfully authenticated there and got redirect back to NetBird where I was presented with an "Opps something went wrong" screen with a "Logout" button.

The first time this happened I just reloaded the oauth2 URL again which got me a login screen again and I clicked the Authentik link again which sent me to Authentik but since I was already logged in there I just got auto redirected back to NetBird and got the same "Opps" screen.

At this point I clicked on the Logout button which just reloaded the "Opps" screen again. I clicked the Logout button a few more times with the same results and then loaded up the oauth2 URL again. This time when I clicked on Authentik, it did its redirect thing but this time the Peers screen finally loaded up again.

I've only tried the above steps once so far so will have to wait for the stalled screen to pop up again to see if it was just a fluke or not.

<!-- gh-comment-id:3796031081 --> @heymoe commented on GitHub (Jan 25, 2026): Just wanted to throw in my $0.02 on this issue too. I'm also experience this same issue. I have a fresh self-hosted install running 0.64.1 and have it configured to use Authentik as an external iDP so I can login using Authentik or email+password with the internal iDP. The last time this stalled screen happened to me was when I returned to the browser that that I was already logged into NetBird with which was still showing the peers list and I hit the browser refresh button and that's when the stalled screen that other above posted pops up. Clicking refresh again doesn't resolve the issue nor does doing a F12+empty cache and hard reload. In the paste I found doing a "docker compose down" and then a "docker compose up -d" would get things going again but this most recent time I tried something different. I manually change the URL in the browser to loaded a oauth2 URL that my browser had in its history "https://netbird.domain.com/oauth2/auth?client_id=netbird-dashboard&redirect_uri..." which pulled up the login screen. I selected the Authentik link and successfully authenticated there and got redirect back to NetBird where I was presented with an "Opps something went wrong" screen with a "Logout" button. The first time this happened I just reloaded the oauth2 URL again which got me a login screen again and I clicked the Authentik link again which sent me to Authentik but since I was already logged in there I just got auto redirected back to NetBird and got the same "Opps" screen. At this point I clicked on the Logout button which just reloaded the "Opps" screen again. I clicked the Logout button a few more times with the same results and then loaded up the oauth2 URL again. This time when I clicked on Authentik, it did its redirect thing but this time the Peers screen finally loaded up again. I've only tried the above steps once so far so will have to wait for the stalled screen to pop up again to see if it was just a fluke or not.
Author
Owner

@helioloureiro commented on GitHub (Jan 27, 2026):

I just tried the oauth2/auth trick using the known link from the browser history.

And it didn't work. Screen remains blocked.

I also tried from a different browser. Same issue.

The annoying thing is the lack of server side command line or even logs to deal with this issue.

<!-- gh-comment-id:3804992603 --> @helioloureiro commented on GitHub (Jan 27, 2026): I just tried the oauth2/auth trick using the known link from the browser history. And it didn't work. Screen remains blocked. I also tried from a different browser. Same issue. The annoying thing is the lack of server side command line or even logs to deal with this issue.
Author
Owner

@heymoe commented on GitHub (Jan 27, 2026):

So it happened to me again.. Got the stalled loading screen. I followed my steps again but did have to make a change or 2.

  1. Manually change the URL to the oauth2 URL in my history which brings me to the login page.
  2. Select Authentik and authenticate which redirects me back to NetBird but get the "Opps" screen.
  3. Click the "Logout" button which will just redirect you back to the same "Opps" screen again
  4. Change my URL back to the base NetBird URL: https://netbird.domain.com/ . Which presents me with a login page
  5. Login like usual again and this time everything loads up again.

Basically I didn't reload the oauth2 URL again after step 2, I just clicked the logout button right away (step 3) and for step 4 I went to the base Netbird URL instead of the oauth2 URL.

Will test these steps again to the next time things stall out again.

@helioloureiro To see the logs you should be able to run this command from your NetBird folder (where the docker-compose.yml file is) to see the logs for the management container:

docker compose logs -f management

or for dashboard logs run:

docker compose logs -f dashboard

or to see all the logs from all the Netbird containers at the same time:

docker compose logs -f

ctrl-c to exit

<!-- gh-comment-id:3808154457 --> @heymoe commented on GitHub (Jan 27, 2026): So it happened to me again.. Got the stalled loading screen. I followed my steps again but did have to make a change or 2. 1) Manually change the URL to the oauth2 URL in my history which brings me to the login page. 2) Select Authentik and authenticate which redirects me back to NetBird but get the "Opps" screen. 3) Click the "Logout" button which will just redirect you back to the same "Opps" screen again 4) Change my URL back to the base NetBird URL: https://netbird.domain.com/ . Which presents me with a login page 5) Login like usual again and this time everything loads up again. Basically I didn't reload the oauth2 URL again after step 2, I just clicked the logout button right away (step 3) and for step 4 I went to the base Netbird URL instead of the oauth2 URL. Will test these steps again to the next time things stall out again. @helioloureiro To see the logs you should be able to run this command from your NetBird folder (where the docker-compose.yml file is) to see the logs for the management container: `docker compose logs -f management` or for dashboard logs run: `docker compose logs -f dashboard` or to see all the logs from all the Netbird containers at the same time: `docker compose logs -f` ctrl-c to exit
Author
Owner

@heisbrot commented on GitHub (Jan 28, 2026):

Hey folks,

can you share your setup, specifically:

  • Using embedded IdP: Yes / No
  • Which IdP?
  • Open browser console and share the console output and HAR file. You can follow the steps here (Start from step 3)
  • Does the issue happen when you open an incognito window?
  • Management logs
  • Dashboard version and management version
<!-- gh-comment-id:3809428269 --> @heisbrot commented on GitHub (Jan 28, 2026): Hey folks, can you share your setup, specifically: - Using embedded IdP: Yes / No - Which IdP? - Open browser console and share the console output and HAR file. You can follow the steps [here](https://learn.microsoft.com/en-us/azure/azure-portal/capture-browser-trace#capture-an-azure-portal-browser-trace-in-google-chrome) (Start from step 3) - Does the issue happen when you open an incognito window? - Management logs - Dashboard version and management version
Author
Owner

@helioloureiro commented on GitHub (Jan 28, 2026):

  • Using embedded IdP: Yes
  • Which IdP? Microsoft Entra
  • Open browser console and share the console output and HAR file:

netbird.har.gz

  • Does the issue happen when you open an incognito window? Yes
  • Management logs:
2026-01-20T09:44:26Z INFO management/cmd/management.go:306: running with the embedded IdP: https://netbird.[redacted]/oauth2
2026-01-20T09:44:26Z INFO management/cmd/management.go:309: Relay addresses: [rels://netbird.[redacted]:443]
2026-01-20T09:44:26Z INFO management/server/store/store.go:292: using SQLite store engine
2026-01-20T09:44:26Z INFO management/server/store/sql_store.go:98: Setting transaction timeout to 5m0s
2026-01-20T09:44:26Z INFO management/server/store/sql_store.go:112: Set max open db connections to 1, max idle to 1, max lifetime to 1h0m0s, max idle time to 3m0s
2026-01-20T09:44:26Z INFO management/server/migration/migration.go:263: No plain setup keys found in table setup_keys, no migration needed
2026-01-20T09:44:26Z INFO management/server/migration/migration.go:301: Migration of plain setup key to hashed setup key completed
2026-01-20T09:44:26Z INFO management/server/migration/migration.go:344: No rows with empty enabled found in table network_resources, no migration needed
2026-01-20T09:44:26Z INFO management/server/migration/migration.go:358: Migration of empty enabled to default value in table network_resources completed
2026-01-20T09:44:26Z INFO management/server/migration/migration.go:344: No rows with empty enabled found in table network_routers, no migration needed
2026-01-20T09:44:26Z INFO management/server/migration/migration.go:358: Migration of empty enabled to default value in table network_routers completed
2026-01-20T09:44:26Z INFO management/server/migration/migration.go:344: No rows with empty name found in table users, no migration needed
2026-01-20T09:44:26Z INFO management/server/migration/migration.go:358: Migration of empty name to default value in table users completed
2026-01-20T09:44:26Z INFO management/server/migration/migration.go:344: No rows with empty email found in table users, no migration needed
2026-01-20T09:44:26Z INFO management/server/migration/migration.go:358: Migration of empty email to default value in table users completed
2026-01-20T09:44:26Z INFO management/server/migration/migration.go:399: index idx_account_ip already exists on table peers
2026-01-20T09:44:26Z INFO management/server/migration/migration.go:399: index idx_account_dnslabel already exists on table peers
2026-01-20T09:44:26Z INFO management/server/migration/migration.go:399: index idx_peers_key_unique already exists on table peers
2026-01-20T09:44:27Z INFO management/internals/server/modules.go:45: geolocation service has been initialized from /var/lib/netbird/
2026-01-20T09:44:27Z INFO management/server/telemetry/app_metrics.go:193: enabled application metrics and exposing on http://0.0.0.0:9090
2026-01-20T09:44:27Z WARN management/internals/server/boot.go:108: TrustedPeers are configured to default value '0.0.0.0/0', '::/0'. This allows connection IP spoofing.
2026-01-20T09:44:27Z INFO management/server/account_request_buffer.go:45: set account request buffer interval to 100ms
2026-01-20T09:44:27Z INFO management/server/activity/store/sql_store.go:261: using sqlite as activity event store engine
2026-01-20T09:44:27Z INFO management/server/activity/store/sql_store.go:290: Set max open db connections to 1, max idle to 1, max lifetime to 1h0m0s, max idle time to 3m0s
2026-01-20T09:44:27Z INFO management/server/migration/migration.go:344: No rows with empty name found in table deleted_users, no migration needed
2026-01-20T09:44:27Z INFO management/server/migration/migration.go:358: Migration of empty name to default value in table deleted_users completed
2026-01-20T09:44:27Z INFO management/server/migration/migration.go:344: No rows with empty enc_algo found in table deleted_users, no migration needed
2026-01-20T09:44:27Z INFO management/server/migration/migration.go:358: Migration of empty enc_algo to default value in table deleted_users completed
2026-01-20T09:44:27Z WARN management/internals/controllers/network_map/controller/controller.go:84: failed to parse NB_EXPERIMENT_NETWORK_MAP, using default value false: strconv.ParseBool: parsing "": invalid syntax
2026-01-20T09:44:27Z INFO management/server/idp/embedded.go:200: embedded Dex IDP initialized with issuer: https://netbird.[redacted]/oauth2
2026-01-20T09:44:27Z INFO management/server/account_request_buffer.go:45: set account request buffer interval to 100ms
2026-01-20T09:44:27Z WARN management/internals/controllers/network_map/controller/controller.go:626: failed to parse peer update interval, using default value 1ms: strconv.Atoi: parsing "": invalid syntax
2026-01-20T09:44:27Z INFO management/internals/controllers/network_map/controller/controller.go:642: set peer update buffer interval to 1ms
2026-01-20T09:44:27Z INFO management/server/account.go:234: single account mode enabled, accounts number 1
2026-01-20T09:44:27Z ERRO [keysLocation: http://localhost:80/oauth2/keys] shared/auth/jwt/validator.go:76: could not get keys from location: Get "http://localhost:80/oauth2/keys": dial tcp [::1]:80: connect: connection refused
2026-01-20T09:44:27Z INFO management/internals/server/server.go:149: running gRPC backward compatibility server: [::]:33073
2026-01-20T09:44:27Z INFO management/internals/server/server.go:187: management server version 0.63.0
2026-01-20T09:44:27Z INFO management/internals/server/server.go:188: running HTTP server and gRPC server on the same port: [::]:80
2026-01-20T10:06:27Z WARN [context: GRPC, requestID: d5nl78ujm9hs73d24kt0, accountID: UNKNOWN, peerID: fxn[redacted]] management/internals/shared/grpc/server.go:606: failed logging in peer fxn[redacted]: no peer auth method provided, please use a setup key or interactive SSO login
2026-01-20T10:12:00Z WARN [peerID: fxn[redacted], context: GRPC, requestID: d5nl9s6jm9hs73d24ld0, accountID: UNKNOWN] management/internals/shared/grpc/server.go:606: failed logging in peer fxn[redacted]: no peer auth method provided, please use a setup key or interactive SSO login
2026-01-20T10:13:15Z WARN [context: GRPC, requestID: d5nlaeujm9hs73d24lf0, accountID: UNKNOWN, peerID: fxn[redacted]] management/internals/shared/grpc/server.go:606: failed logging in peer fxn[redacted]: no peer auth method provided, please use a setup key or interactive SSO login
2026-01-20T10:22:30Z WARN [accountID: UNKNOWN, peerID: uc9[redacted], context: GRPC, requestID: d5nlepmjm9hs73d24mbg] management/internals/shared/grpc/server.go:606: failed logging in peer uc9[redacted]: no peer auth method provided, please use a setup key or interactive SSO login
2026-01-20T10:24:11Z WARN [context: GRPC, requestID: d5nlfiujm9hs73d24mdg, accountID: UNKNOWN, peerID: uc9[redacted]] management/internals/shared/grpc/server.go:606: failed logging in peer uc9[redacted]: no peer auth method provided, please use a setup key or interactive SSO login
2026-01-20T10:25:22Z WARN [context: GRPC, requestID: d5nlg4mjm9hs73d24mfg, accountID: UNKNOWN, peerID: uc9[redacted]] management/internals/shared/grpc/server.go:606: failed logging in peer uc9[redacted]: no peer auth method provided, please use a setup key or interactive SSO login
2026-01-20T10:25:25Z WARN [peerID: uc9[redacted], context: GRPC, requestID: d5nlg5ejm9hs73d24mhg, accountID: UNKNOWN] management/internals/shared/grpc/server.go:606: failed logging in peer uc9[redacted]: no peer auth method provided, please use a setup key or interactive SSO login
2026-01-20T11:13:17Z WARN [context: GRPC, requestID: d5nm6jejm9hs73d24uh0, accountID: d5ifaoejm9hs73aiiurg, peerID: fxn[redacted]] management/internals/shared/grpc/server.go:606: failed logging in peer fxn[redacted]: peer login has expired, please log in once more
2026-01-20T11:25:32Z WARN [context: GRPC, requestID: d5nmcb6jm9hs73d24uj0, accountID: d5ifaoejm9hs73aiiurg, peerID: uc9[redacted]] management/internals/shared/grpc/server.go:606: failed logging in peer uc9[redacted]: peer login has expired, please log in once more
2026-01-20T12:05:04Z WARN [accountID: d5ifaoejm9hs73aiiurg, peerID: fxn[redacted], context: GRPC, requestID: d5nmus6jm9hs73d24uk0] management/internals/shared/grpc/server.go:606: failed logging in peer fxn[redacted]: peer login has expired, please log in once more
2026-01-20T12:05:18Z WARN [accountID: d5ifaoejm9hs73aiiurg, peerID: uc9[redacted], context: GRPC, requestID: d5nmuvmjm9hs73d24ul0] management/internals/shared/grpc/server.go:606: failed logging in peer uc9[redacted]: peer login has expired, please log in once more
2026-01-20T12:28:06Z WARN [context: GRPC, requestID: d5nn9lmjm9hs73d24un0, accountID: d5ifaoejm9hs73aiiurg, peerID: fxn[redacted]] management/internals/shared/grpc/server.go:606: failed logging in peer fxn[redacted]: peer login has expired, please log in once more
2026-01-20T12:49:46Z INFO management/cmd/management.go:123: Received shutdown signal, stopping server...
2026-01-20T12:49:46Z ERRO management/server/telemetry/app_metrics.go:188: metrics server error: accept tcp4 0.0.0.0:9090: use of closed network connection
2026-01-20T12:49:46Z INFO management/server/telemetry/app_metrics.go:190: metrics server stopped
2026-01-20T12:49:46Z INFO management/internals/server/server.go:230: stopped Management Service
2026-01-20T12:50:22Z INFO management/cmd/management.go:306: running with the embedded IdP: https://netbird.[redacted]/oauth2
2026-01-20T12:50:22Z INFO management/cmd/management.go:309: Relay addresses: [rels://netbird.[redacted]:443]
2026-01-20T12:50:22Z INFO management/server/store/store.go:292: using SQLite store engine
2026-01-20T12:50:22Z INFO management/server/store/sql_store.go:98: Setting transaction timeout to 5m0s
2026-01-20T12:50:22Z INFO management/server/store/sql_store.go:112: Set max open db connections to 1, max idle to 1, max lifetime to 1h0m0s, max idle time to 3m0s
2026-01-20T12:50:22Z INFO management/server/migration/migration.go:263: No plain setup keys found in table setup_keys, no migration needed
2026-01-20T12:50:22Z INFO management/server/migration/migration.go:301: Migration of plain setup key to hashed setup key completed
2026-01-20T12:50:22Z INFO management/server/migration/migration.go:344: No rows with empty enabled found in table network_resources, no migration needed
2026-01-20T12:50:22Z INFO management/server/migration/migration.go:358: Migration of empty enabled to default value in table network_resources completed
2026-01-20T12:50:22Z INFO management/server/migration/migration.go:344: No rows with empty enabled found in table network_routers, no migration needed
2026-01-20T12:50:22Z INFO management/server/migration/migration.go:358: Migration of empty enabled to default value in table network_routers completed
2026-01-20T12:50:22Z INFO management/server/migration/migration.go:344: No rows with empty name found in table users, no migration needed
2026-01-20T12:50:22Z INFO management/server/migration/migration.go:358: Migration of empty name to default value in table users completed
2026-01-20T12:50:22Z INFO management/server/migration/migration.go:344: No rows with empty email found in table users, no migration needed
2026-01-20T12:50:22Z INFO management/server/migration/migration.go:358: Migration of empty email to default value in table users completed
2026-01-20T12:50:23Z INFO management/server/migration/migration.go:399: index idx_account_ip already exists on table peers
2026-01-20T12:50:23Z INFO management/server/migration/migration.go:399: index idx_account_dnslabel already exists on table peers
2026-01-20T12:50:23Z INFO management/server/migration/migration.go:399: index idx_peers_key_unique already exists on table peers
2026-01-20T12:50:23Z INFO management/internals/server/modules.go:45: geolocation service has been initialized from /var/lib/netbird/
2026-01-20T12:50:23Z INFO management/server/telemetry/app_metrics.go:193: enabled application metrics and exposing on http://0.0.0.0:9090
2026-01-20T12:50:23Z WARN management/internals/server/boot.go:108: TrustedPeers are configured to default value '0.0.0.0/0', '::/0'. This allows connection IP spoofing.
2026-01-20T12:50:23Z INFO management/server/account_request_buffer.go:45: set account request buffer interval to 100ms
2026-01-20T12:50:23Z INFO management/server/activity/store/sql_store.go:261: using sqlite as activity event store engine
2026-01-20T12:50:23Z INFO management/server/activity/store/sql_store.go:290: Set max open db connections to 1, max idle to 1, max lifetime to 1h0m0s, max idle time to 3m0s
2026-01-20T12:50:23Z INFO management/server/migration/migration.go:344: No rows with empty name found in table deleted_users, no migration needed
2026-01-20T12:50:23Z INFO management/server/migration/migration.go:358: Migration of empty name to default value in table deleted_users completed
2026-01-20T12:50:23Z INFO management/server/migration/migration.go:344: No rows with empty enc_algo found in table deleted_users, no migration needed
2026-01-20T12:50:23Z INFO management/server/migration/migration.go:358: Migration of empty enc_algo to default value in table deleted_users completed
2026-01-20T12:50:23Z WARN management/internals/controllers/network_map/controller/controller.go:84: failed to parse NB_EXPERIMENT_NETWORK_MAP, using default value false: strconv.ParseBool: parsing "": invalid syntax
2026-01-20T12:50:24Z INFO management/server/idp/embedded.go:200: embedded Dex IDP initialized with issuer: https://netbird.[redacted]/oauth2
2026-01-20T12:50:24Z INFO management/server/account_request_buffer.go:45: set account request buffer interval to 100ms
2026-01-20T12:50:24Z WARN management/internals/controllers/network_map/controller/controller.go:626: failed to parse peer update interval, using default value 1ms: strconv.Atoi: parsing "": invalid syntax
2026-01-20T12:50:24Z INFO management/internals/controllers/network_map/controller/controller.go:642: set peer update buffer interval to 1ms
2026-01-20T12:50:24Z INFO management/server/account.go:234: single account mode enabled, accounts number 1
2026-01-20T12:50:24Z ERRO [keysLocation: http://localhost:80/oauth2/keys] shared/auth/jwt/validator.go:76: could not get keys from location: Get "http://localhost:80/oauth2/keys": dial tcp [::1]:80: connect: connection refused
2026-01-20T12:50:24Z INFO management/internals/server/server.go:149: running gRPC backward compatibility server: [::]:33073
2026-01-20T12:50:24Z INFO management/internals/server/server.go:187: management server version 0.63.0
2026-01-20T12:50:24Z INFO management/internals/server/server.go:188: running HTTP server and gRPC server on the same port: [::]:80
2026-01-20T12:52:55Z WARN [context: GRPC, requestID: d5nnl9ujm9hs73f3pdn0, accountID: d5ifaoejm9hs73aiiurg, peerID: uc9[redacted]] management/internals/shared/grpc/server.go:606: failed logging in peer uc9[redacted]: peer login has expired, please log in once more
2026-01-20T12:52:59Z WARN [peerID: uc9[redacted], context: GRPC, requestID: d5nnlaujm9hs73f3pdp0, accountID: d5ifaoejm9hs73aiiurg] management/internals/shared/grpc/server.go:606: failed logging in peer uc9[redacted]: peer login has expired, please log in once more
2026-01-20T13:18:21Z WARN [accountID: d5ifaoejm9hs73aiiurg, peerID: fxn[redacted], context: GRPC, requestID: d5no17ejm9hs73f3pdtg] management/internals/shared/grpc/server.go:606: failed logging in peer fxn[redacted]: peer login has expired, please log in once more
2026-01-20T13:35:50Z WARN [context: GRPC, requestID: d5no9dmjm9hs73f3pe0g, accountID: d5ifaoejm9hs73aiiurg, peerID: fxn[redacted]] management/internals/shared/grpc/server.go:606: failed logging in peer fxn[redacted]: peer login has expired, please log in once more
2026-01-20T14:21:02Z WARN [context: GRPC, requestID: d5noujmjm9hs73f3ped0, accountID: d5ifaoejm9hs73aiiurg, peerID: fxn[redacted]] management/internals/shared/grpc/server.go:606: failed logging in peer fxn[redacted]: peer login has expired, please log in once more
2026-01-20T14:22:13Z WARN [context: GRPC, requestID: d5nov5ejm9hs73f3pef0, accountID: d5ifaoejm9hs73aiiurg, peerID: fxn[redacted]] management/internals/shared/grpc/server.go:606: failed logging in peer fxn[redacted]: peer login has expired, please log in once more
2026-01-20T18:50:24Z INFO management/internals/server/server.go:194: your management version, "0.63.0", is outdated, a new management version is available. Learn more here: https://github.com/netbirdio/netbird/releases
2026-01-21T00:50:23Z INFO management/server/metrics/selfhosted.go:156: sent anonymous metrics, next push will happen in 12h0m0s. You can disable these metrics by running with flag --disable-anonymous-metrics, see more information at https://docs.netbird.io/about-netbird/faq#why-and-what-are-the-anonymous-usage-metrics
2026-01-21T08:44:30Z WARN [accountID: d5ifaoejm9hs73aiiurg, peerID: fxn[redacted], context: GRPC, requestID: d5o93rmjm9hs73f3pf5g] management/internals/shared/grpc/server.go:606: failed logging in peer fxn[redacted]: peer login has expired, please log in once more
2026-01-21T08:45:46Z WARN [peerID: fxn[redacted], context: GRPC, requestID: d5o94emjm9hs73f3pfhg, accountID: d5ifaoejm9hs73aiiurg] management/internals/shared/grpc/server.go:606: failed logging in peer fxn[redacted]: peer login has expired, please log in once more
2026-01-21T09:45:49Z WARN [context: GRPC, requestID: d5oa0jejm9hs73f3pj20, accountID: d5ifaoejm9hs73aiiurg, peerID: fxn[redacted]] management/internals/shared/grpc/server.go:606: failed logging in peer fxn[redacted]: peer login has expired, please log in once more
2026-01-21T10:16:24Z WARN [requestID: d5oaeu6jm9hs73f3pj80, accountID: d5ifaoejm9hs73aiiurg, peerID: fxn[redacted], context: GRPC] management/internals/shared/grpc/server.go:606: failed logging in peer fxn[redacted]: peer login has expired, please log in once more
2026-01-21T11:29:58Z WARN [context: GRPC, requestID: d5obhdmjm9hs73f3pj90, accountID: d5ifaoejm9hs73aiiurg, peerID: fxn[redacted]] management/internals/shared/grpc/server.go:606: failed logging in peer fxn[redacted]: peer login has expired, please log in once more
2026-01-21T11:59:59Z WARN [context: GRPC, requestID: d5obvfujm9hs73f3pja0, accountID: d5ifaoejm9hs73aiiurg, peerID: fxn[redacted]] management/internals/shared/grpc/server.go:606: failed logging in peer fxn[redacted]: peer login has expired, please log in once more
2026-01-21T12:50:24Z INFO management/server/metrics/selfhosted.go:156: sent anonymous metrics, next push will happen in 12h0m0s. You can disable these metrics by running with flag --disable-anonymous-metrics, see more information at https://docs.netbird.io/about-netbird/faq#why-and-what-are-the-anonymous-usage-metrics
2026-01-21T12:59:15Z INFO management/cmd/management.go:123: Received shutdown signal, stopping server...
2026-01-21T12:59:15Z ERRO management/server/telemetry/app_metrics.go:188: metrics server error: accept tcp4 0.0.0.0:9090: use of closed network connection
2026-01-21T12:59:15Z INFO management/server/telemetry/app_metrics.go:190: metrics server stopped
2026-01-21T12:59:15Z INFO management/internals/server/server.go:230: stopped Management Service
2026-01-21T12:59:19Z INFO management/cmd/management.go:306: running with the embedded IdP: https://netbird.[redacted]/oauth2
2026-01-21T12:59:19Z INFO management/cmd/management.go:309: Relay addresses: [rels://netbird.[redacted]:443]
2026-01-21T12:59:19Z INFO management/server/store/store.go:292: using SQLite store engine
2026-01-21T12:59:19Z INFO management/server/store/sql_store.go:98: Setting transaction timeout to 5m0s
2026-01-21T12:59:19Z INFO management/server/store/sql_store.go:112: Set max open db connections to 1, max idle to 1, max lifetime to 1h0m0s, max idle time to 3m0s
2026-01-21T12:59:19Z INFO management/server/migration/migration.go:263: No plain setup keys found in table setup_keys, no migration needed
2026-01-21T12:59:19Z INFO management/server/migration/migration.go:301: Migration of plain setup key to hashed setup key completed
2026-01-21T12:59:19Z INFO management/server/migration/migration.go:344: No rows with empty enabled found in table network_resources, no migration needed
2026-01-21T12:59:19Z INFO management/server/migration/migration.go:358: Migration of empty enabled to default value in table network_resources completed
2026-01-21T12:59:19Z INFO management/server/migration/migration.go:344: No rows with empty enabled found in table network_routers, no migration needed
2026-01-21T12:59:19Z INFO management/server/migration/migration.go:358: Migration of empty enabled to default value in table network_routers completed
2026-01-21T12:59:19Z INFO management/server/migration/migration.go:344: No rows with empty name found in table users, no migration needed
2026-01-21T12:59:19Z INFO management/server/migration/migration.go:358: Migration of empty name to default value in table users completed
2026-01-21T12:59:19Z INFO management/server/migration/migration.go:344: No rows with empty email found in table users, no migration needed
2026-01-21T12:59:19Z INFO management/server/migration/migration.go:358: Migration of empty email to default value in table users completed
2026-01-21T12:59:19Z INFO management/server/migration/migration.go:399: index idx_account_ip already exists on table peers
2026-01-21T12:59:19Z INFO management/server/migration/migration.go:399: index idx_account_dnslabel already exists on table peers
2026-01-21T12:59:19Z INFO management/server/migration/migration.go:399: index idx_peers_key_unique already exists on table peers
2026-01-21T12:59:19Z INFO management/internals/server/modules.go:45: geolocation service has been initialized from /var/lib/netbird/
2026-01-21T12:59:19Z INFO management/server/telemetry/app_metrics.go:193: enabled application metrics and exposing on http://0.0.0.0:9090
2026-01-21T12:59:19Z WARN management/internals/server/boot.go:108: TrustedPeers are configured to default value '0.0.0.0/0', '::/0'. This allows connection IP spoofing.
2026-01-21T12:59:19Z INFO management/server/account_request_buffer.go:45: set account request buffer interval to 100ms
2026-01-21T12:59:19Z INFO management/server/activity/store/sql_store.go:261: using sqlite as activity event store engine
2026-01-21T12:59:19Z INFO management/server/activity/store/sql_store.go:290: Set max open db connections to 1, max idle to 1, max lifetime to 1h0m0s, max idle time to 3m0s
2026-01-21T12:59:19Z INFO management/server/migration/migration.go:344: No rows with empty name found in table deleted_users, no migration needed
2026-01-21T12:59:19Z INFO management/server/migration/migration.go:358: Migration of empty name to default value in table deleted_users completed
2026-01-21T12:59:19Z INFO management/server/migration/migration.go:344: No rows with empty enc_algo found in table deleted_users, no migration needed
2026-01-21T12:59:19Z INFO management/server/migration/migration.go:358: Migration of empty enc_algo to default value in table deleted_users completed
2026-01-21T12:59:20Z WARN management/internals/controllers/network_map/controller/controller.go:84: failed to parse NB_EXPERIMENT_NETWORK_MAP, using default value false: strconv.ParseBool: parsing "": invalid syntax
2026-01-21T12:59:20Z INFO management/server/idp/embedded.go:200: embedded Dex IDP initialized with issuer: https://netbird.[redacted]/oauth2
2026-01-21T12:59:20Z INFO management/server/account_request_buffer.go:45: set account request buffer interval to 100ms
2026-01-21T12:59:20Z WARN management/internals/controllers/network_map/controller/controller.go:626: failed to parse peer update interval, using default value 1ms: strconv.Atoi: parsing "": invalid syntax
2026-01-21T12:59:20Z INFO management/internals/controllers/network_map/controller/controller.go:642: set peer update buffer interval to 1ms
2026-01-21T12:59:20Z INFO management/server/account.go:234: single account mode enabled, accounts number 1
2026-01-21T12:59:20Z ERRO [keysLocation: http://localhost:80/oauth2/keys] shared/auth/jwt/validator.go:76: could not get keys from location: Get "http://localhost:80/oauth2/keys": dial tcp [::1]:80: connect: connection refused
2026-01-21T12:59:20Z INFO management/internals/server/server.go:149: running gRPC backward compatibility server: [::]:33073
2026-01-21T12:59:20Z INFO management/internals/server/server.go:187: management server version 0.63.0
2026-01-21T12:59:20Z INFO management/internals/server/server.go:188: running HTTP server and gRPC server on the same port: [::]:80
2026-01-21T12:59:20Z INFO management/internals/server/server.go:194: your management version, "0.63.0", is outdated, a new management version is available. Learn more here: https://github.com/netbirdio/netbird/releases
2026-01-22T00:59:20Z INFO management/server/metrics/selfhosted.go:156: sent anonymous metrics, next push will happen in 12h0m0s. You can disable these metrics by running with flag --disable-anonymous-metrics, see more information at https://docs.netbird.io/about-netbird/faq#why-and-what-are-the-anonymous-usage-metrics
2026-01-22T12:59:20Z INFO management/server/metrics/selfhosted.go:156: sent anonymous metrics, next push will happen in 12h0m0s. You can disable these metrics by running with flag --disable-anonymous-metrics, see more information at https://docs.netbird.io/about-netbird/faq#why-and-what-are-the-anonymous-usage-metrics
2026-01-22T17:27:37Z WARN [context: GRPC, requestID: d5p5s2ejm9hs73ai4vug, accountID: d5ifaoejm9hs73aiiurg, peerID: uc9[redacted]] management/internals/shared/grpc/server.go:606: failed logging in peer uc9[redacted]: peer login has expired, please log in once more
2026-01-23T00:59:20Z INFO management/server/metrics/selfhosted.go:156: sent anonymous metrics, next push will happen in 12h0m0s. You can disable these metrics by running with flag --disable-anonymous-metrics, see more information at https://docs.netbird.io/about-netbird/faq#why-and-what-are-the-anonymous-usage-metrics
2026-01-23T12:59:20Z INFO management/server/metrics/selfhosted.go:156: sent anonymous metrics, next push will happen in 12h0m0s. You can disable these metrics by running with flag --disable-anonymous-metrics, see more information at https://docs.netbird.io/about-netbird/faq#why-and-what-are-the-anonymous-usage-metrics
2026-01-23T14:43:50Z INFO management/cmd/management.go:123: Received shutdown signal, stopping server...
2026-01-23T14:43:50Z ERRO management/server/telemetry/app_metrics.go:188: metrics server error: accept tcp4 0.0.0.0:9090: use of closed network connection
2026-01-23T14:43:50Z INFO management/server/telemetry/app_metrics.go:190: metrics server stopped
2026-01-23T14:43:50Z INFO management/internals/server/server.go:230: stopped Management Service
2026-01-23T14:43:52Z INFO management/cmd/management.go:306: running with the embedded IdP: https://netbird.[redacted]/oauth2
2026-01-23T14:43:52Z INFO management/cmd/management.go:309: Relay addresses: [rels://netbird.[redacted]:443]
2026-01-23T14:43:52Z INFO management/server/store/store.go:292: using SQLite store engine
2026-01-23T14:43:52Z INFO management/server/store/sql_store.go:98: Setting transaction timeout to 5m0s
2026-01-23T14:43:52Z INFO management/server/store/sql_store.go:112: Set max open db connections to 1, max idle to 1, max lifetime to 1h0m0s, max idle time to 3m0s
2026-01-23T14:43:52Z INFO management/server/migration/migration.go:263: No plain setup keys found in table setup_keys, no migration needed
2026-01-23T14:43:52Z INFO management/server/migration/migration.go:301: Migration of plain setup key to hashed setup key completed
2026-01-23T14:43:52Z INFO management/server/migration/migration.go:344: No rows with empty enabled found in table network_resources, no migration needed
2026-01-23T14:43:52Z INFO management/server/migration/migration.go:358: Migration of empty enabled to default value in table network_resources completed
2026-01-23T14:43:52Z INFO management/server/migration/migration.go:344: No rows with empty enabled found in table network_routers, no migration needed
2026-01-23T14:43:52Z INFO management/server/migration/migration.go:358: Migration of empty enabled to default value in table network_routers completed
2026-01-23T14:43:52Z INFO management/server/migration/migration.go:344: No rows with empty name found in table users, no migration needed
2026-01-23T14:43:52Z INFO management/server/migration/migration.go:358: Migration of empty name to default value in table users completed
2026-01-23T14:43:52Z INFO management/server/migration/migration.go:344: No rows with empty email found in table users, no migration needed
2026-01-23T14:43:52Z INFO management/server/migration/migration.go:358: Migration of empty email to default value in table users completed
2026-01-23T14:43:52Z INFO management/server/migration/migration.go:399: index idx_account_ip already exists on table peers
2026-01-23T14:43:52Z INFO management/server/migration/migration.go:399: index idx_account_dnslabel already exists on table peers
2026-01-23T14:43:52Z INFO management/server/migration/migration.go:399: index idx_peers_key_unique already exists on table peers
2026-01-23T14:43:52Z INFO management/internals/server/modules.go:45: geolocation service has been initialized from /var/lib/netbird/
2026-01-23T14:43:52Z INFO management/server/telemetry/app_metrics.go:193: enabled application metrics and exposing on http://0.0.0.0:9090
2026-01-23T14:43:52Z WARN management/internals/server/boot.go:108: TrustedPeers are configured to default value '0.0.0.0/0', '::/0'. This allows connection IP spoofing.
2026-01-23T14:43:52Z INFO management/server/account_request_buffer.go:45: set account request buffer interval to 100ms
2026-01-23T14:43:52Z INFO management/server/activity/store/sql_store.go:261: using sqlite as activity event store engine
2026-01-23T14:43:52Z INFO management/server/activity/store/sql_store.go:290: Set max open db connections to 1, max idle to 1, max lifetime to 1h0m0s, max idle time to 3m0s
2026-01-23T14:43:52Z INFO management/server/migration/migration.go:344: No rows with empty name found in table deleted_users, no migration needed
2026-01-23T14:43:52Z INFO management/server/migration/migration.go:358: Migration of empty name to default value in table deleted_users completed
2026-01-23T14:43:52Z INFO management/server/migration/migration.go:344: No rows with empty enc_algo found in table deleted_users, no migration needed
2026-01-23T14:43:52Z INFO management/server/migration/migration.go:358: Migration of empty enc_algo to default value in table deleted_users completed
2026-01-23T14:43:52Z WARN management/internals/controllers/network_map/controller/controller.go:84: failed to parse NB_EXPERIMENT_NETWORK_MAP, using default value false: strconv.ParseBool: parsing "": invalid syntax
2026-01-23T14:43:53Z INFO management/server/idp/embedded.go:200: embedded Dex IDP initialized with issuer: https://netbird.[redacted]/oauth2
2026-01-23T14:43:53Z INFO management/server/account_request_buffer.go:45: set account request buffer interval to 100ms
2026-01-23T14:43:53Z WARN management/internals/controllers/network_map/controller/controller.go:626: failed to parse peer update interval, using default value 1ms: strconv.Atoi: parsing "": invalid syntax
2026-01-23T14:43:53Z INFO management/internals/controllers/network_map/controller/controller.go:642: set peer update buffer interval to 1ms
2026-01-23T14:43:53Z INFO management/server/account.go:234: single account mode enabled, accounts number 1
2026-01-23T14:43:53Z ERRO [keysLocation: http://localhost:80/oauth2/keys] shared/auth/jwt/validator.go:76: could not get keys from location: Get "http://localhost:80/oauth2/keys": dial tcp [::1]:80: connect: connection refused
2026-01-23T14:43:53Z INFO management/internals/server/server.go:149: running gRPC backward compatibility server: [::]:33073
2026-01-23T14:43:53Z INFO management/internals/server/server.go:187: management server version 0.63.0
2026-01-23T14:43:53Z INFO management/internals/server/server.go:188: running HTTP server and gRPC server on the same port: [::]:80
2026-01-23T14:43:53Z INFO management/internals/server/server.go:194: your management version, "0.63.0", is outdated, a new management version is available. Learn more here: https://github.com/netbirdio/netbird/releases
2026-01-23T18:43:53Z INFO management/internals/server/server.go:194: your management version, "0.63.0", is outdated, a new management version is available. Learn more here: https://github.com/netbirdio/netbird/releases
2026-01-24T02:43:53Z INFO management/server/metrics/selfhosted.go:156: sent anonymous metrics, next push will happen in 12h0m0s. You can disable these metrics by running with flag --disable-anonymous-metrics, see more information at https://docs.netbird.io/about-netbird/faq#why-and-what-are-the-anonymous-usage-metrics
2026-01-24T11:26:52Z INFO management/cmd/management.go:123: Received shutdown signal, stopping server...
2026-01-24T11:26:52Z ERRO management/server/telemetry/app_metrics.go:188: metrics server error: accept tcp4 0.0.0.0:9090: use of closed network connection
2026-01-24T11:26:52Z INFO management/server/telemetry/app_metrics.go:190: metrics server stopped
2026-01-24T11:26:52Z INFO management/internals/server/server.go:230: stopped Management Service
2026-01-24T11:27:00Z INFO management/cmd/management.go:306: running with the embedded IdP: https://netbird.[redacted]/oauth2
2026-01-24T11:27:00Z INFO management/cmd/management.go:309: Relay addresses: [rels://netbird.[redacted]:443]
2026-01-24T11:27:00Z INFO management/server/store/store.go:292: using SQLite store engine
2026-01-24T11:27:00Z INFO management/server/store/sql_store.go:98: Setting transaction timeout to 5m0s
2026-01-24T11:27:00Z INFO management/server/store/sql_store.go:112: Set max open db connections to 1, max idle to 1, max lifetime to 1h0m0s, max idle time to 3m0s
2026-01-24T11:27:00Z INFO management/server/migration/migration.go:263: No plain setup keys found in table setup_keys, no migration needed
2026-01-24T11:27:00Z INFO management/server/migration/migration.go:301: Migration of plain setup key to hashed setup key completed
2026-01-24T11:27:00Z INFO management/server/migration/migration.go:344: No rows with empty enabled found in table network_resources, no migration needed
2026-01-24T11:27:00Z INFO management/server/migration/migration.go:358: Migration of empty enabled to default value in table network_resources completed
2026-01-24T11:27:00Z INFO management/server/migration/migration.go:344: No rows with empty enabled found in table network_routers, no migration needed
2026-01-24T11:27:00Z INFO management/server/migration/migration.go:358: Migration of empty enabled to default value in table network_routers completed
2026-01-24T11:27:00Z INFO management/server/migration/migration.go:344: No rows with empty name found in table users, no migration needed
2026-01-24T11:27:00Z INFO management/server/migration/migration.go:358: Migration of empty name to default value in table users completed
2026-01-24T11:27:00Z INFO management/server/migration/migration.go:344: No rows with empty email found in table users, no migration needed
2026-01-24T11:27:00Z INFO management/server/migration/migration.go:358: Migration of empty email to default value in table users completed
2026-01-24T11:27:01Z INFO management/server/migration/migration.go:399: index idx_account_ip already exists on table peers
2026-01-24T11:27:01Z INFO management/server/migration/migration.go:399: index idx_account_dnslabel already exists on table peers
2026-01-24T11:27:01Z INFO management/server/migration/migration.go:399: index idx_peers_key_unique already exists on table peers
2026-01-24T11:27:01Z INFO management/internals/server/modules.go:45: geolocation service has been initialized from /var/lib/netbird/
2026-01-24T11:27:01Z INFO management/server/telemetry/app_metrics.go:193: enabled application metrics and exposing on http://0.0.0.0:9090
2026-01-24T11:27:01Z WARN management/internals/server/boot.go:108: TrustedPeers are configured to default value '0.0.0.0/0', '::/0'. This allows connection IP spoofing.
2026-01-24T11:27:01Z INFO management/server/account_request_buffer.go:45: set account request buffer interval to 100ms
2026-01-24T11:27:01Z INFO management/server/activity/store/sql_store.go:261: using sqlite as activity event store engine
2026-01-24T11:27:01Z INFO management/server/activity/store/sql_store.go:290: Set max open db connections to 1, max idle to 1, max lifetime to 1h0m0s, max idle time to 3m0s
2026-01-24T11:27:01Z INFO management/server/migration/migration.go:344: No rows with empty name found in table deleted_users, no migration needed
2026-01-24T11:27:01Z INFO management/server/migration/migration.go:358: Migration of empty name to default value in table deleted_users completed
2026-01-24T11:27:01Z INFO management/server/migration/migration.go:344: No rows with empty enc_algo found in table deleted_users, no migration needed
2026-01-24T11:27:01Z INFO management/server/migration/migration.go:358: Migration of empty enc_algo to default value in table deleted_users completed
2026-01-24T11:27:01Z WARN management/internals/controllers/network_map/controller/controller.go:84: failed to parse NB_EXPERIMENT_NETWORK_MAP, using default value false: strconv.ParseBool: parsing "": invalid syntax
2026-01-24T11:27:02Z INFO management/server/idp/embedded.go:200: embedded Dex IDP initialized with issuer: https://netbird.[redacted]/oauth2
2026-01-24T11:27:02Z INFO management/server/account_request_buffer.go:45: set account request buffer interval to 100ms
2026-01-24T11:27:02Z WARN management/internals/controllers/network_map/controller/controller.go:626: failed to parse peer update interval, using default value 1ms: strconv.Atoi: parsing "": invalid syntax
2026-01-24T11:27:02Z INFO management/internals/controllers/network_map/controller/controller.go:642: set peer update buffer interval to 1ms
2026-01-24T11:27:02Z INFO management/server/account.go:234: single account mode enabled, accounts number 1
2026-01-24T11:27:02Z ERRO [keysLocation: http://localhost:80/oauth2/keys] shared/auth/jwt/validator.go:76: could not get keys from location: Get "http://localhost:80/oauth2/keys": dial tcp [::1]:80: connect: connection refused
2026-01-24T11:27:02Z INFO management/internals/server/server.go:149: running gRPC backward compatibility server: [::]:33073
2026-01-24T11:27:02Z INFO management/internals/server/server.go:187: management server version 0.63.0
2026-01-24T11:27:02Z INFO management/internals/server/server.go:188: running HTTP server and gRPC server on the same port: [::]:80
2026-01-24T11:27:02Z INFO management/internals/server/server.go:194: your management version, "0.63.0", is outdated, a new management version is available. Learn more here: https://github.com/netbirdio/netbird/releases
2026-01-24T23:27:02Z INFO management/server/metrics/selfhosted.go:156: sent anonymous metrics, next push will happen in 12h0m0s. You can disable these metrics by running with flag --disable-anonymous-metrics, see more information at https://docs.netbird.io/about-netbird/faq#why-and-what-are-the-anonymous-usage-metrics
2026-01-25T11:27:02Z INFO management/server/metrics/selfhosted.go:156: sent anonymous metrics, next push will happen in 12h0m0s. You can disable these metrics by running with flag --disable-anonymous-metrics, see more information at https://docs.netbird.io/about-netbird/faq#why-and-what-are-the-anonymous-usage-metrics
2026-01-25T23:27:02Z INFO management/server/metrics/selfhosted.go:156: sent anonymous metrics, next push will happen in 12h0m0s. You can disable these metrics by running with flag --disable-anonymous-metrics, see more information at https://docs.netbird.io/about-netbird/faq#why-and-what-are-the-anonymous-usage-metrics
2026-01-26T11:27:02Z INFO management/server/metrics/selfhosted.go:156: sent anonymous metrics, next push will happen in 12h0m0s. You can disable these metrics by running with flag --disable-anonymous-metrics, see more information at https://docs.netbird.io/about-netbird/faq#why-and-what-are-the-anonymous-usage-metrics
2026-01-26T23:27:02Z INFO management/server/metrics/selfhosted.go:156: sent anonymous metrics, next push will happen in 12h0m0s. You can disable these metrics by running with flag --disable-anonymous-metrics, see more information at https://docs.netbird.io/about-netbird/faq#why-and-what-are-the-anonymous-usage-metrics
2026-01-27T11:27:02Z INFO management/server/metrics/selfhosted.go:156: sent anonymous metrics, next push will happen in 12h0m0s. You can disable these metrics by running with flag --disable-anonymous-metrics, see more information at https://docs.netbird.io/about-netbird/faq#why-and-what-are-the-anonymous-usage-metrics
2026-01-27T12:56:40Z WARN [context: GRPC, requestID: d5sbc26jm9hs73b9aul0, accountID: d5ifaoejm9hs73aiiurg, peerID: fxn[redacted]] management/internals/shared/grpc/server.go:606: failed logging in peer fxn[redacted]: peer login has expired, please log in once more
2026-01-27T12:57:02Z INFO management/internals/server/server.go:194: your management version, "0.63.0", is outdated, a new management version is available. Learn more here: https://github.com/netbirdio/netbird/releases
2026-01-27T13:34:04Z WARN [context: GRPC, requestID: d5sbtj6jm9hs73b9aun0, accountID: d5ifaoejm9hs73aiiurg, peerID: fxn[redacted]] management/internals/shared/grpc/server.go:606: failed logging in peer fxn[redacted]: peer login has expired, please log in once more
2026-01-27T13:43:02Z WARN [context: GRPC, requestID: d5sc1pmjm9hs73b9auo0, accountID: d5ifaoejm9hs73aiiurg, peerID: fxn[redacted]] management/internals/shared/grpc/server.go:606: failed logging in peer fxn[redacted]: peer login has expired, please log in once more
2026-01-27T15:00:42Z WARN [context: GRPC, requestID: d5sd66mjm9hs73b9aup0, accountID: d5ifaoejm9hs73aiiurg, peerID: fxn[redacted]] management/internals/shared/grpc/server.go:606: failed logging in peer fxn[redacted]: peer login has expired, please log in once more
2026-01-27T15:27:02Z ERRO version/update.go:145: failed to fetch version info: Get "https://pkgs.netbird.io/releases/latest/version": dial tcp 5.22.212.152:443: connect: connection refused
2026-01-27T15:33:26Z WARN [peerID: fxn[redacted], context: GRPC, requestID: d5sdlhmjm9hs73b9auq0, accountID: d5ifaoejm9hs73aiiurg] management/internals/shared/grpc/server.go:606: failed logging in peer fxn[redacted]: peer login has expired, please log in once more
2026-01-27T15:57:02Z ERRO version/update.go:145: failed to fetch version info: Get "https://pkgs.netbird.io/releases/latest/version": dial tcp 5.22.212.152:443: connect: connection refused
2026-01-27T23:27:02Z INFO management/server/metrics/selfhosted.go:156: sent anonymous metrics, next push will happen in 12h0m0s. You can disable these metrics by running with flag --disable-anonymous-metrics, see more information at https://docs.netbird.io/about-netbird/faq#why-and-what-are-the-anonymous-usage-metrics
  • Dashboard version and management version:
IMAGE                         ID             DISK USAGE   CONTENT SIZE   EXTRA
caddy:latest                  2adb640cdc0c       83.2MB         22.8MB    U   
coturn/coturn:latest          5de3fc6be2da        170MB         45.4MB    U   
netbirdio/dashboard:latest    654169f1c4aa        201MB         46.3MB        
netbirdio/management:latest   2c84f4331a3e        290MB         88.7MB        
netbirdio/relay:latest        dde7542e5dd9       59.7MB         15.9MB        
netbirdio/signal:latest       bb93ccefde0a       60.3MB         16.1MB        
<!-- gh-comment-id:3810154334 --> @helioloureiro commented on GitHub (Jan 28, 2026): - Using embedded IdP: **Yes** - Which IdP? **Microsoft Entra** - Open browser console and share the console output and HAR file: [**netbird.har.gz**](https://github.com/user-attachments/files/24906253/netbird.har.gz) - Does the issue happen when you open an incognito window? **Yes** - Management logs: ```logs 2026-01-20T09:44:26Z INFO management/cmd/management.go:306: running with the embedded IdP: https://netbird.[redacted]/oauth2 2026-01-20T09:44:26Z INFO management/cmd/management.go:309: Relay addresses: [rels://netbird.[redacted]:443] 2026-01-20T09:44:26Z INFO management/server/store/store.go:292: using SQLite store engine 2026-01-20T09:44:26Z INFO management/server/store/sql_store.go:98: Setting transaction timeout to 5m0s 2026-01-20T09:44:26Z INFO management/server/store/sql_store.go:112: Set max open db connections to 1, max idle to 1, max lifetime to 1h0m0s, max idle time to 3m0s 2026-01-20T09:44:26Z INFO management/server/migration/migration.go:263: No plain setup keys found in table setup_keys, no migration needed 2026-01-20T09:44:26Z INFO management/server/migration/migration.go:301: Migration of plain setup key to hashed setup key completed 2026-01-20T09:44:26Z INFO management/server/migration/migration.go:344: No rows with empty enabled found in table network_resources, no migration needed 2026-01-20T09:44:26Z INFO management/server/migration/migration.go:358: Migration of empty enabled to default value in table network_resources completed 2026-01-20T09:44:26Z INFO management/server/migration/migration.go:344: No rows with empty enabled found in table network_routers, no migration needed 2026-01-20T09:44:26Z INFO management/server/migration/migration.go:358: Migration of empty enabled to default value in table network_routers completed 2026-01-20T09:44:26Z INFO management/server/migration/migration.go:344: No rows with empty name found in table users, no migration needed 2026-01-20T09:44:26Z INFO management/server/migration/migration.go:358: Migration of empty name to default value in table users completed 2026-01-20T09:44:26Z INFO management/server/migration/migration.go:344: No rows with empty email found in table users, no migration needed 2026-01-20T09:44:26Z INFO management/server/migration/migration.go:358: Migration of empty email to default value in table users completed 2026-01-20T09:44:26Z INFO management/server/migration/migration.go:399: index idx_account_ip already exists on table peers 2026-01-20T09:44:26Z INFO management/server/migration/migration.go:399: index idx_account_dnslabel already exists on table peers 2026-01-20T09:44:26Z INFO management/server/migration/migration.go:399: index idx_peers_key_unique already exists on table peers 2026-01-20T09:44:27Z INFO management/internals/server/modules.go:45: geolocation service has been initialized from /var/lib/netbird/ 2026-01-20T09:44:27Z INFO management/server/telemetry/app_metrics.go:193: enabled application metrics and exposing on http://0.0.0.0:9090 2026-01-20T09:44:27Z WARN management/internals/server/boot.go:108: TrustedPeers are configured to default value '0.0.0.0/0', '::/0'. This allows connection IP spoofing. 2026-01-20T09:44:27Z INFO management/server/account_request_buffer.go:45: set account request buffer interval to 100ms 2026-01-20T09:44:27Z INFO management/server/activity/store/sql_store.go:261: using sqlite as activity event store engine 2026-01-20T09:44:27Z INFO management/server/activity/store/sql_store.go:290: Set max open db connections to 1, max idle to 1, max lifetime to 1h0m0s, max idle time to 3m0s 2026-01-20T09:44:27Z INFO management/server/migration/migration.go:344: No rows with empty name found in table deleted_users, no migration needed 2026-01-20T09:44:27Z INFO management/server/migration/migration.go:358: Migration of empty name to default value in table deleted_users completed 2026-01-20T09:44:27Z INFO management/server/migration/migration.go:344: No rows with empty enc_algo found in table deleted_users, no migration needed 2026-01-20T09:44:27Z INFO management/server/migration/migration.go:358: Migration of empty enc_algo to default value in table deleted_users completed 2026-01-20T09:44:27Z WARN management/internals/controllers/network_map/controller/controller.go:84: failed to parse NB_EXPERIMENT_NETWORK_MAP, using default value false: strconv.ParseBool: parsing "": invalid syntax 2026-01-20T09:44:27Z INFO management/server/idp/embedded.go:200: embedded Dex IDP initialized with issuer: https://netbird.[redacted]/oauth2 2026-01-20T09:44:27Z INFO management/server/account_request_buffer.go:45: set account request buffer interval to 100ms 2026-01-20T09:44:27Z WARN management/internals/controllers/network_map/controller/controller.go:626: failed to parse peer update interval, using default value 1ms: strconv.Atoi: parsing "": invalid syntax 2026-01-20T09:44:27Z INFO management/internals/controllers/network_map/controller/controller.go:642: set peer update buffer interval to 1ms 2026-01-20T09:44:27Z INFO management/server/account.go:234: single account mode enabled, accounts number 1 2026-01-20T09:44:27Z ERRO [keysLocation: http://localhost:80/oauth2/keys] shared/auth/jwt/validator.go:76: could not get keys from location: Get "http://localhost:80/oauth2/keys": dial tcp [::1]:80: connect: connection refused 2026-01-20T09:44:27Z INFO management/internals/server/server.go:149: running gRPC backward compatibility server: [::]:33073 2026-01-20T09:44:27Z INFO management/internals/server/server.go:187: management server version 0.63.0 2026-01-20T09:44:27Z INFO management/internals/server/server.go:188: running HTTP server and gRPC server on the same port: [::]:80 2026-01-20T10:06:27Z WARN [context: GRPC, requestID: d5nl78ujm9hs73d24kt0, accountID: UNKNOWN, peerID: fxn[redacted]] management/internals/shared/grpc/server.go:606: failed logging in peer fxn[redacted]: no peer auth method provided, please use a setup key or interactive SSO login 2026-01-20T10:12:00Z WARN [peerID: fxn[redacted], context: GRPC, requestID: d5nl9s6jm9hs73d24ld0, accountID: UNKNOWN] management/internals/shared/grpc/server.go:606: failed logging in peer fxn[redacted]: no peer auth method provided, please use a setup key or interactive SSO login 2026-01-20T10:13:15Z WARN [context: GRPC, requestID: d5nlaeujm9hs73d24lf0, accountID: UNKNOWN, peerID: fxn[redacted]] management/internals/shared/grpc/server.go:606: failed logging in peer fxn[redacted]: no peer auth method provided, please use a setup key or interactive SSO login 2026-01-20T10:22:30Z WARN [accountID: UNKNOWN, peerID: uc9[redacted], context: GRPC, requestID: d5nlepmjm9hs73d24mbg] management/internals/shared/grpc/server.go:606: failed logging in peer uc9[redacted]: no peer auth method provided, please use a setup key or interactive SSO login 2026-01-20T10:24:11Z WARN [context: GRPC, requestID: d5nlfiujm9hs73d24mdg, accountID: UNKNOWN, peerID: uc9[redacted]] management/internals/shared/grpc/server.go:606: failed logging in peer uc9[redacted]: no peer auth method provided, please use a setup key or interactive SSO login 2026-01-20T10:25:22Z WARN [context: GRPC, requestID: d5nlg4mjm9hs73d24mfg, accountID: UNKNOWN, peerID: uc9[redacted]] management/internals/shared/grpc/server.go:606: failed logging in peer uc9[redacted]: no peer auth method provided, please use a setup key or interactive SSO login 2026-01-20T10:25:25Z WARN [peerID: uc9[redacted], context: GRPC, requestID: d5nlg5ejm9hs73d24mhg, accountID: UNKNOWN] management/internals/shared/grpc/server.go:606: failed logging in peer uc9[redacted]: no peer auth method provided, please use a setup key or interactive SSO login 2026-01-20T11:13:17Z WARN [context: GRPC, requestID: d5nm6jejm9hs73d24uh0, accountID: d5ifaoejm9hs73aiiurg, peerID: fxn[redacted]] management/internals/shared/grpc/server.go:606: failed logging in peer fxn[redacted]: peer login has expired, please log in once more 2026-01-20T11:25:32Z WARN [context: GRPC, requestID: d5nmcb6jm9hs73d24uj0, accountID: d5ifaoejm9hs73aiiurg, peerID: uc9[redacted]] management/internals/shared/grpc/server.go:606: failed logging in peer uc9[redacted]: peer login has expired, please log in once more 2026-01-20T12:05:04Z WARN [accountID: d5ifaoejm9hs73aiiurg, peerID: fxn[redacted], context: GRPC, requestID: d5nmus6jm9hs73d24uk0] management/internals/shared/grpc/server.go:606: failed logging in peer fxn[redacted]: peer login has expired, please log in once more 2026-01-20T12:05:18Z WARN [accountID: d5ifaoejm9hs73aiiurg, peerID: uc9[redacted], context: GRPC, requestID: d5nmuvmjm9hs73d24ul0] management/internals/shared/grpc/server.go:606: failed logging in peer uc9[redacted]: peer login has expired, please log in once more 2026-01-20T12:28:06Z WARN [context: GRPC, requestID: d5nn9lmjm9hs73d24un0, accountID: d5ifaoejm9hs73aiiurg, peerID: fxn[redacted]] management/internals/shared/grpc/server.go:606: failed logging in peer fxn[redacted]: peer login has expired, please log in once more 2026-01-20T12:49:46Z INFO management/cmd/management.go:123: Received shutdown signal, stopping server... 2026-01-20T12:49:46Z ERRO management/server/telemetry/app_metrics.go:188: metrics server error: accept tcp4 0.0.0.0:9090: use of closed network connection 2026-01-20T12:49:46Z INFO management/server/telemetry/app_metrics.go:190: metrics server stopped 2026-01-20T12:49:46Z INFO management/internals/server/server.go:230: stopped Management Service 2026-01-20T12:50:22Z INFO management/cmd/management.go:306: running with the embedded IdP: https://netbird.[redacted]/oauth2 2026-01-20T12:50:22Z INFO management/cmd/management.go:309: Relay addresses: [rels://netbird.[redacted]:443] 2026-01-20T12:50:22Z INFO management/server/store/store.go:292: using SQLite store engine 2026-01-20T12:50:22Z INFO management/server/store/sql_store.go:98: Setting transaction timeout to 5m0s 2026-01-20T12:50:22Z INFO management/server/store/sql_store.go:112: Set max open db connections to 1, max idle to 1, max lifetime to 1h0m0s, max idle time to 3m0s 2026-01-20T12:50:22Z INFO management/server/migration/migration.go:263: No plain setup keys found in table setup_keys, no migration needed 2026-01-20T12:50:22Z INFO management/server/migration/migration.go:301: Migration of plain setup key to hashed setup key completed 2026-01-20T12:50:22Z INFO management/server/migration/migration.go:344: No rows with empty enabled found in table network_resources, no migration needed 2026-01-20T12:50:22Z INFO management/server/migration/migration.go:358: Migration of empty enabled to default value in table network_resources completed 2026-01-20T12:50:22Z INFO management/server/migration/migration.go:344: No rows with empty enabled found in table network_routers, no migration needed 2026-01-20T12:50:22Z INFO management/server/migration/migration.go:358: Migration of empty enabled to default value in table network_routers completed 2026-01-20T12:50:22Z INFO management/server/migration/migration.go:344: No rows with empty name found in table users, no migration needed 2026-01-20T12:50:22Z INFO management/server/migration/migration.go:358: Migration of empty name to default value in table users completed 2026-01-20T12:50:22Z INFO management/server/migration/migration.go:344: No rows with empty email found in table users, no migration needed 2026-01-20T12:50:22Z INFO management/server/migration/migration.go:358: Migration of empty email to default value in table users completed 2026-01-20T12:50:23Z INFO management/server/migration/migration.go:399: index idx_account_ip already exists on table peers 2026-01-20T12:50:23Z INFO management/server/migration/migration.go:399: index idx_account_dnslabel already exists on table peers 2026-01-20T12:50:23Z INFO management/server/migration/migration.go:399: index idx_peers_key_unique already exists on table peers 2026-01-20T12:50:23Z INFO management/internals/server/modules.go:45: geolocation service has been initialized from /var/lib/netbird/ 2026-01-20T12:50:23Z INFO management/server/telemetry/app_metrics.go:193: enabled application metrics and exposing on http://0.0.0.0:9090 2026-01-20T12:50:23Z WARN management/internals/server/boot.go:108: TrustedPeers are configured to default value '0.0.0.0/0', '::/0'. This allows connection IP spoofing. 2026-01-20T12:50:23Z INFO management/server/account_request_buffer.go:45: set account request buffer interval to 100ms 2026-01-20T12:50:23Z INFO management/server/activity/store/sql_store.go:261: using sqlite as activity event store engine 2026-01-20T12:50:23Z INFO management/server/activity/store/sql_store.go:290: Set max open db connections to 1, max idle to 1, max lifetime to 1h0m0s, max idle time to 3m0s 2026-01-20T12:50:23Z INFO management/server/migration/migration.go:344: No rows with empty name found in table deleted_users, no migration needed 2026-01-20T12:50:23Z INFO management/server/migration/migration.go:358: Migration of empty name to default value in table deleted_users completed 2026-01-20T12:50:23Z INFO management/server/migration/migration.go:344: No rows with empty enc_algo found in table deleted_users, no migration needed 2026-01-20T12:50:23Z INFO management/server/migration/migration.go:358: Migration of empty enc_algo to default value in table deleted_users completed 2026-01-20T12:50:23Z WARN management/internals/controllers/network_map/controller/controller.go:84: failed to parse NB_EXPERIMENT_NETWORK_MAP, using default value false: strconv.ParseBool: parsing "": invalid syntax 2026-01-20T12:50:24Z INFO management/server/idp/embedded.go:200: embedded Dex IDP initialized with issuer: https://netbird.[redacted]/oauth2 2026-01-20T12:50:24Z INFO management/server/account_request_buffer.go:45: set account request buffer interval to 100ms 2026-01-20T12:50:24Z WARN management/internals/controllers/network_map/controller/controller.go:626: failed to parse peer update interval, using default value 1ms: strconv.Atoi: parsing "": invalid syntax 2026-01-20T12:50:24Z INFO management/internals/controllers/network_map/controller/controller.go:642: set peer update buffer interval to 1ms 2026-01-20T12:50:24Z INFO management/server/account.go:234: single account mode enabled, accounts number 1 2026-01-20T12:50:24Z ERRO [keysLocation: http://localhost:80/oauth2/keys] shared/auth/jwt/validator.go:76: could not get keys from location: Get "http://localhost:80/oauth2/keys": dial tcp [::1]:80: connect: connection refused 2026-01-20T12:50:24Z INFO management/internals/server/server.go:149: running gRPC backward compatibility server: [::]:33073 2026-01-20T12:50:24Z INFO management/internals/server/server.go:187: management server version 0.63.0 2026-01-20T12:50:24Z INFO management/internals/server/server.go:188: running HTTP server and gRPC server on the same port: [::]:80 2026-01-20T12:52:55Z WARN [context: GRPC, requestID: d5nnl9ujm9hs73f3pdn0, accountID: d5ifaoejm9hs73aiiurg, peerID: uc9[redacted]] management/internals/shared/grpc/server.go:606: failed logging in peer uc9[redacted]: peer login has expired, please log in once more 2026-01-20T12:52:59Z WARN [peerID: uc9[redacted], context: GRPC, requestID: d5nnlaujm9hs73f3pdp0, accountID: d5ifaoejm9hs73aiiurg] management/internals/shared/grpc/server.go:606: failed logging in peer uc9[redacted]: peer login has expired, please log in once more 2026-01-20T13:18:21Z WARN [accountID: d5ifaoejm9hs73aiiurg, peerID: fxn[redacted], context: GRPC, requestID: d5no17ejm9hs73f3pdtg] management/internals/shared/grpc/server.go:606: failed logging in peer fxn[redacted]: peer login has expired, please log in once more 2026-01-20T13:35:50Z WARN [context: GRPC, requestID: d5no9dmjm9hs73f3pe0g, accountID: d5ifaoejm9hs73aiiurg, peerID: fxn[redacted]] management/internals/shared/grpc/server.go:606: failed logging in peer fxn[redacted]: peer login has expired, please log in once more 2026-01-20T14:21:02Z WARN [context: GRPC, requestID: d5noujmjm9hs73f3ped0, accountID: d5ifaoejm9hs73aiiurg, peerID: fxn[redacted]] management/internals/shared/grpc/server.go:606: failed logging in peer fxn[redacted]: peer login has expired, please log in once more 2026-01-20T14:22:13Z WARN [context: GRPC, requestID: d5nov5ejm9hs73f3pef0, accountID: d5ifaoejm9hs73aiiurg, peerID: fxn[redacted]] management/internals/shared/grpc/server.go:606: failed logging in peer fxn[redacted]: peer login has expired, please log in once more 2026-01-20T18:50:24Z INFO management/internals/server/server.go:194: your management version, "0.63.0", is outdated, a new management version is available. Learn more here: https://github.com/netbirdio/netbird/releases 2026-01-21T00:50:23Z INFO management/server/metrics/selfhosted.go:156: sent anonymous metrics, next push will happen in 12h0m0s. You can disable these metrics by running with flag --disable-anonymous-metrics, see more information at https://docs.netbird.io/about-netbird/faq#why-and-what-are-the-anonymous-usage-metrics 2026-01-21T08:44:30Z WARN [accountID: d5ifaoejm9hs73aiiurg, peerID: fxn[redacted], context: GRPC, requestID: d5o93rmjm9hs73f3pf5g] management/internals/shared/grpc/server.go:606: failed logging in peer fxn[redacted]: peer login has expired, please log in once more 2026-01-21T08:45:46Z WARN [peerID: fxn[redacted], context: GRPC, requestID: d5o94emjm9hs73f3pfhg, accountID: d5ifaoejm9hs73aiiurg] management/internals/shared/grpc/server.go:606: failed logging in peer fxn[redacted]: peer login has expired, please log in once more 2026-01-21T09:45:49Z WARN [context: GRPC, requestID: d5oa0jejm9hs73f3pj20, accountID: d5ifaoejm9hs73aiiurg, peerID: fxn[redacted]] management/internals/shared/grpc/server.go:606: failed logging in peer fxn[redacted]: peer login has expired, please log in once more 2026-01-21T10:16:24Z WARN [requestID: d5oaeu6jm9hs73f3pj80, accountID: d5ifaoejm9hs73aiiurg, peerID: fxn[redacted], context: GRPC] management/internals/shared/grpc/server.go:606: failed logging in peer fxn[redacted]: peer login has expired, please log in once more 2026-01-21T11:29:58Z WARN [context: GRPC, requestID: d5obhdmjm9hs73f3pj90, accountID: d5ifaoejm9hs73aiiurg, peerID: fxn[redacted]] management/internals/shared/grpc/server.go:606: failed logging in peer fxn[redacted]: peer login has expired, please log in once more 2026-01-21T11:59:59Z WARN [context: GRPC, requestID: d5obvfujm9hs73f3pja0, accountID: d5ifaoejm9hs73aiiurg, peerID: fxn[redacted]] management/internals/shared/grpc/server.go:606: failed logging in peer fxn[redacted]: peer login has expired, please log in once more 2026-01-21T12:50:24Z INFO management/server/metrics/selfhosted.go:156: sent anonymous metrics, next push will happen in 12h0m0s. You can disable these metrics by running with flag --disable-anonymous-metrics, see more information at https://docs.netbird.io/about-netbird/faq#why-and-what-are-the-anonymous-usage-metrics 2026-01-21T12:59:15Z INFO management/cmd/management.go:123: Received shutdown signal, stopping server... 2026-01-21T12:59:15Z ERRO management/server/telemetry/app_metrics.go:188: metrics server error: accept tcp4 0.0.0.0:9090: use of closed network connection 2026-01-21T12:59:15Z INFO management/server/telemetry/app_metrics.go:190: metrics server stopped 2026-01-21T12:59:15Z INFO management/internals/server/server.go:230: stopped Management Service 2026-01-21T12:59:19Z INFO management/cmd/management.go:306: running with the embedded IdP: https://netbird.[redacted]/oauth2 2026-01-21T12:59:19Z INFO management/cmd/management.go:309: Relay addresses: [rels://netbird.[redacted]:443] 2026-01-21T12:59:19Z INFO management/server/store/store.go:292: using SQLite store engine 2026-01-21T12:59:19Z INFO management/server/store/sql_store.go:98: Setting transaction timeout to 5m0s 2026-01-21T12:59:19Z INFO management/server/store/sql_store.go:112: Set max open db connections to 1, max idle to 1, max lifetime to 1h0m0s, max idle time to 3m0s 2026-01-21T12:59:19Z INFO management/server/migration/migration.go:263: No plain setup keys found in table setup_keys, no migration needed 2026-01-21T12:59:19Z INFO management/server/migration/migration.go:301: Migration of plain setup key to hashed setup key completed 2026-01-21T12:59:19Z INFO management/server/migration/migration.go:344: No rows with empty enabled found in table network_resources, no migration needed 2026-01-21T12:59:19Z INFO management/server/migration/migration.go:358: Migration of empty enabled to default value in table network_resources completed 2026-01-21T12:59:19Z INFO management/server/migration/migration.go:344: No rows with empty enabled found in table network_routers, no migration needed 2026-01-21T12:59:19Z INFO management/server/migration/migration.go:358: Migration of empty enabled to default value in table network_routers completed 2026-01-21T12:59:19Z INFO management/server/migration/migration.go:344: No rows with empty name found in table users, no migration needed 2026-01-21T12:59:19Z INFO management/server/migration/migration.go:358: Migration of empty name to default value in table users completed 2026-01-21T12:59:19Z INFO management/server/migration/migration.go:344: No rows with empty email found in table users, no migration needed 2026-01-21T12:59:19Z INFO management/server/migration/migration.go:358: Migration of empty email to default value in table users completed 2026-01-21T12:59:19Z INFO management/server/migration/migration.go:399: index idx_account_ip already exists on table peers 2026-01-21T12:59:19Z INFO management/server/migration/migration.go:399: index idx_account_dnslabel already exists on table peers 2026-01-21T12:59:19Z INFO management/server/migration/migration.go:399: index idx_peers_key_unique already exists on table peers 2026-01-21T12:59:19Z INFO management/internals/server/modules.go:45: geolocation service has been initialized from /var/lib/netbird/ 2026-01-21T12:59:19Z INFO management/server/telemetry/app_metrics.go:193: enabled application metrics and exposing on http://0.0.0.0:9090 2026-01-21T12:59:19Z WARN management/internals/server/boot.go:108: TrustedPeers are configured to default value '0.0.0.0/0', '::/0'. This allows connection IP spoofing. 2026-01-21T12:59:19Z INFO management/server/account_request_buffer.go:45: set account request buffer interval to 100ms 2026-01-21T12:59:19Z INFO management/server/activity/store/sql_store.go:261: using sqlite as activity event store engine 2026-01-21T12:59:19Z INFO management/server/activity/store/sql_store.go:290: Set max open db connections to 1, max idle to 1, max lifetime to 1h0m0s, max idle time to 3m0s 2026-01-21T12:59:19Z INFO management/server/migration/migration.go:344: No rows with empty name found in table deleted_users, no migration needed 2026-01-21T12:59:19Z INFO management/server/migration/migration.go:358: Migration of empty name to default value in table deleted_users completed 2026-01-21T12:59:19Z INFO management/server/migration/migration.go:344: No rows with empty enc_algo found in table deleted_users, no migration needed 2026-01-21T12:59:19Z INFO management/server/migration/migration.go:358: Migration of empty enc_algo to default value in table deleted_users completed 2026-01-21T12:59:20Z WARN management/internals/controllers/network_map/controller/controller.go:84: failed to parse NB_EXPERIMENT_NETWORK_MAP, using default value false: strconv.ParseBool: parsing "": invalid syntax 2026-01-21T12:59:20Z INFO management/server/idp/embedded.go:200: embedded Dex IDP initialized with issuer: https://netbird.[redacted]/oauth2 2026-01-21T12:59:20Z INFO management/server/account_request_buffer.go:45: set account request buffer interval to 100ms 2026-01-21T12:59:20Z WARN management/internals/controllers/network_map/controller/controller.go:626: failed to parse peer update interval, using default value 1ms: strconv.Atoi: parsing "": invalid syntax 2026-01-21T12:59:20Z INFO management/internals/controllers/network_map/controller/controller.go:642: set peer update buffer interval to 1ms 2026-01-21T12:59:20Z INFO management/server/account.go:234: single account mode enabled, accounts number 1 2026-01-21T12:59:20Z ERRO [keysLocation: http://localhost:80/oauth2/keys] shared/auth/jwt/validator.go:76: could not get keys from location: Get "http://localhost:80/oauth2/keys": dial tcp [::1]:80: connect: connection refused 2026-01-21T12:59:20Z INFO management/internals/server/server.go:149: running gRPC backward compatibility server: [::]:33073 2026-01-21T12:59:20Z INFO management/internals/server/server.go:187: management server version 0.63.0 2026-01-21T12:59:20Z INFO management/internals/server/server.go:188: running HTTP server and gRPC server on the same port: [::]:80 2026-01-21T12:59:20Z INFO management/internals/server/server.go:194: your management version, "0.63.0", is outdated, a new management version is available. Learn more here: https://github.com/netbirdio/netbird/releases 2026-01-22T00:59:20Z INFO management/server/metrics/selfhosted.go:156: sent anonymous metrics, next push will happen in 12h0m0s. You can disable these metrics by running with flag --disable-anonymous-metrics, see more information at https://docs.netbird.io/about-netbird/faq#why-and-what-are-the-anonymous-usage-metrics 2026-01-22T12:59:20Z INFO management/server/metrics/selfhosted.go:156: sent anonymous metrics, next push will happen in 12h0m0s. You can disable these metrics by running with flag --disable-anonymous-metrics, see more information at https://docs.netbird.io/about-netbird/faq#why-and-what-are-the-anonymous-usage-metrics 2026-01-22T17:27:37Z WARN [context: GRPC, requestID: d5p5s2ejm9hs73ai4vug, accountID: d5ifaoejm9hs73aiiurg, peerID: uc9[redacted]] management/internals/shared/grpc/server.go:606: failed logging in peer uc9[redacted]: peer login has expired, please log in once more 2026-01-23T00:59:20Z INFO management/server/metrics/selfhosted.go:156: sent anonymous metrics, next push will happen in 12h0m0s. You can disable these metrics by running with flag --disable-anonymous-metrics, see more information at https://docs.netbird.io/about-netbird/faq#why-and-what-are-the-anonymous-usage-metrics 2026-01-23T12:59:20Z INFO management/server/metrics/selfhosted.go:156: sent anonymous metrics, next push will happen in 12h0m0s. You can disable these metrics by running with flag --disable-anonymous-metrics, see more information at https://docs.netbird.io/about-netbird/faq#why-and-what-are-the-anonymous-usage-metrics 2026-01-23T14:43:50Z INFO management/cmd/management.go:123: Received shutdown signal, stopping server... 2026-01-23T14:43:50Z ERRO management/server/telemetry/app_metrics.go:188: metrics server error: accept tcp4 0.0.0.0:9090: use of closed network connection 2026-01-23T14:43:50Z INFO management/server/telemetry/app_metrics.go:190: metrics server stopped 2026-01-23T14:43:50Z INFO management/internals/server/server.go:230: stopped Management Service 2026-01-23T14:43:52Z INFO management/cmd/management.go:306: running with the embedded IdP: https://netbird.[redacted]/oauth2 2026-01-23T14:43:52Z INFO management/cmd/management.go:309: Relay addresses: [rels://netbird.[redacted]:443] 2026-01-23T14:43:52Z INFO management/server/store/store.go:292: using SQLite store engine 2026-01-23T14:43:52Z INFO management/server/store/sql_store.go:98: Setting transaction timeout to 5m0s 2026-01-23T14:43:52Z INFO management/server/store/sql_store.go:112: Set max open db connections to 1, max idle to 1, max lifetime to 1h0m0s, max idle time to 3m0s 2026-01-23T14:43:52Z INFO management/server/migration/migration.go:263: No plain setup keys found in table setup_keys, no migration needed 2026-01-23T14:43:52Z INFO management/server/migration/migration.go:301: Migration of plain setup key to hashed setup key completed 2026-01-23T14:43:52Z INFO management/server/migration/migration.go:344: No rows with empty enabled found in table network_resources, no migration needed 2026-01-23T14:43:52Z INFO management/server/migration/migration.go:358: Migration of empty enabled to default value in table network_resources completed 2026-01-23T14:43:52Z INFO management/server/migration/migration.go:344: No rows with empty enabled found in table network_routers, no migration needed 2026-01-23T14:43:52Z INFO management/server/migration/migration.go:358: Migration of empty enabled to default value in table network_routers completed 2026-01-23T14:43:52Z INFO management/server/migration/migration.go:344: No rows with empty name found in table users, no migration needed 2026-01-23T14:43:52Z INFO management/server/migration/migration.go:358: Migration of empty name to default value in table users completed 2026-01-23T14:43:52Z INFO management/server/migration/migration.go:344: No rows with empty email found in table users, no migration needed 2026-01-23T14:43:52Z INFO management/server/migration/migration.go:358: Migration of empty email to default value in table users completed 2026-01-23T14:43:52Z INFO management/server/migration/migration.go:399: index idx_account_ip already exists on table peers 2026-01-23T14:43:52Z INFO management/server/migration/migration.go:399: index idx_account_dnslabel already exists on table peers 2026-01-23T14:43:52Z INFO management/server/migration/migration.go:399: index idx_peers_key_unique already exists on table peers 2026-01-23T14:43:52Z INFO management/internals/server/modules.go:45: geolocation service has been initialized from /var/lib/netbird/ 2026-01-23T14:43:52Z INFO management/server/telemetry/app_metrics.go:193: enabled application metrics and exposing on http://0.0.0.0:9090 2026-01-23T14:43:52Z WARN management/internals/server/boot.go:108: TrustedPeers are configured to default value '0.0.0.0/0', '::/0'. This allows connection IP spoofing. 2026-01-23T14:43:52Z INFO management/server/account_request_buffer.go:45: set account request buffer interval to 100ms 2026-01-23T14:43:52Z INFO management/server/activity/store/sql_store.go:261: using sqlite as activity event store engine 2026-01-23T14:43:52Z INFO management/server/activity/store/sql_store.go:290: Set max open db connections to 1, max idle to 1, max lifetime to 1h0m0s, max idle time to 3m0s 2026-01-23T14:43:52Z INFO management/server/migration/migration.go:344: No rows with empty name found in table deleted_users, no migration needed 2026-01-23T14:43:52Z INFO management/server/migration/migration.go:358: Migration of empty name to default value in table deleted_users completed 2026-01-23T14:43:52Z INFO management/server/migration/migration.go:344: No rows with empty enc_algo found in table deleted_users, no migration needed 2026-01-23T14:43:52Z INFO management/server/migration/migration.go:358: Migration of empty enc_algo to default value in table deleted_users completed 2026-01-23T14:43:52Z WARN management/internals/controllers/network_map/controller/controller.go:84: failed to parse NB_EXPERIMENT_NETWORK_MAP, using default value false: strconv.ParseBool: parsing "": invalid syntax 2026-01-23T14:43:53Z INFO management/server/idp/embedded.go:200: embedded Dex IDP initialized with issuer: https://netbird.[redacted]/oauth2 2026-01-23T14:43:53Z INFO management/server/account_request_buffer.go:45: set account request buffer interval to 100ms 2026-01-23T14:43:53Z WARN management/internals/controllers/network_map/controller/controller.go:626: failed to parse peer update interval, using default value 1ms: strconv.Atoi: parsing "": invalid syntax 2026-01-23T14:43:53Z INFO management/internals/controllers/network_map/controller/controller.go:642: set peer update buffer interval to 1ms 2026-01-23T14:43:53Z INFO management/server/account.go:234: single account mode enabled, accounts number 1 2026-01-23T14:43:53Z ERRO [keysLocation: http://localhost:80/oauth2/keys] shared/auth/jwt/validator.go:76: could not get keys from location: Get "http://localhost:80/oauth2/keys": dial tcp [::1]:80: connect: connection refused 2026-01-23T14:43:53Z INFO management/internals/server/server.go:149: running gRPC backward compatibility server: [::]:33073 2026-01-23T14:43:53Z INFO management/internals/server/server.go:187: management server version 0.63.0 2026-01-23T14:43:53Z INFO management/internals/server/server.go:188: running HTTP server and gRPC server on the same port: [::]:80 2026-01-23T14:43:53Z INFO management/internals/server/server.go:194: your management version, "0.63.0", is outdated, a new management version is available. Learn more here: https://github.com/netbirdio/netbird/releases 2026-01-23T18:43:53Z INFO management/internals/server/server.go:194: your management version, "0.63.0", is outdated, a new management version is available. Learn more here: https://github.com/netbirdio/netbird/releases 2026-01-24T02:43:53Z INFO management/server/metrics/selfhosted.go:156: sent anonymous metrics, next push will happen in 12h0m0s. You can disable these metrics by running with flag --disable-anonymous-metrics, see more information at https://docs.netbird.io/about-netbird/faq#why-and-what-are-the-anonymous-usage-metrics 2026-01-24T11:26:52Z INFO management/cmd/management.go:123: Received shutdown signal, stopping server... 2026-01-24T11:26:52Z ERRO management/server/telemetry/app_metrics.go:188: metrics server error: accept tcp4 0.0.0.0:9090: use of closed network connection 2026-01-24T11:26:52Z INFO management/server/telemetry/app_metrics.go:190: metrics server stopped 2026-01-24T11:26:52Z INFO management/internals/server/server.go:230: stopped Management Service 2026-01-24T11:27:00Z INFO management/cmd/management.go:306: running with the embedded IdP: https://netbird.[redacted]/oauth2 2026-01-24T11:27:00Z INFO management/cmd/management.go:309: Relay addresses: [rels://netbird.[redacted]:443] 2026-01-24T11:27:00Z INFO management/server/store/store.go:292: using SQLite store engine 2026-01-24T11:27:00Z INFO management/server/store/sql_store.go:98: Setting transaction timeout to 5m0s 2026-01-24T11:27:00Z INFO management/server/store/sql_store.go:112: Set max open db connections to 1, max idle to 1, max lifetime to 1h0m0s, max idle time to 3m0s 2026-01-24T11:27:00Z INFO management/server/migration/migration.go:263: No plain setup keys found in table setup_keys, no migration needed 2026-01-24T11:27:00Z INFO management/server/migration/migration.go:301: Migration of plain setup key to hashed setup key completed 2026-01-24T11:27:00Z INFO management/server/migration/migration.go:344: No rows with empty enabled found in table network_resources, no migration needed 2026-01-24T11:27:00Z INFO management/server/migration/migration.go:358: Migration of empty enabled to default value in table network_resources completed 2026-01-24T11:27:00Z INFO management/server/migration/migration.go:344: No rows with empty enabled found in table network_routers, no migration needed 2026-01-24T11:27:00Z INFO management/server/migration/migration.go:358: Migration of empty enabled to default value in table network_routers completed 2026-01-24T11:27:00Z INFO management/server/migration/migration.go:344: No rows with empty name found in table users, no migration needed 2026-01-24T11:27:00Z INFO management/server/migration/migration.go:358: Migration of empty name to default value in table users completed 2026-01-24T11:27:00Z INFO management/server/migration/migration.go:344: No rows with empty email found in table users, no migration needed 2026-01-24T11:27:00Z INFO management/server/migration/migration.go:358: Migration of empty email to default value in table users completed 2026-01-24T11:27:01Z INFO management/server/migration/migration.go:399: index idx_account_ip already exists on table peers 2026-01-24T11:27:01Z INFO management/server/migration/migration.go:399: index idx_account_dnslabel already exists on table peers 2026-01-24T11:27:01Z INFO management/server/migration/migration.go:399: index idx_peers_key_unique already exists on table peers 2026-01-24T11:27:01Z INFO management/internals/server/modules.go:45: geolocation service has been initialized from /var/lib/netbird/ 2026-01-24T11:27:01Z INFO management/server/telemetry/app_metrics.go:193: enabled application metrics and exposing on http://0.0.0.0:9090 2026-01-24T11:27:01Z WARN management/internals/server/boot.go:108: TrustedPeers are configured to default value '0.0.0.0/0', '::/0'. This allows connection IP spoofing. 2026-01-24T11:27:01Z INFO management/server/account_request_buffer.go:45: set account request buffer interval to 100ms 2026-01-24T11:27:01Z INFO management/server/activity/store/sql_store.go:261: using sqlite as activity event store engine 2026-01-24T11:27:01Z INFO management/server/activity/store/sql_store.go:290: Set max open db connections to 1, max idle to 1, max lifetime to 1h0m0s, max idle time to 3m0s 2026-01-24T11:27:01Z INFO management/server/migration/migration.go:344: No rows with empty name found in table deleted_users, no migration needed 2026-01-24T11:27:01Z INFO management/server/migration/migration.go:358: Migration of empty name to default value in table deleted_users completed 2026-01-24T11:27:01Z INFO management/server/migration/migration.go:344: No rows with empty enc_algo found in table deleted_users, no migration needed 2026-01-24T11:27:01Z INFO management/server/migration/migration.go:358: Migration of empty enc_algo to default value in table deleted_users completed 2026-01-24T11:27:01Z WARN management/internals/controllers/network_map/controller/controller.go:84: failed to parse NB_EXPERIMENT_NETWORK_MAP, using default value false: strconv.ParseBool: parsing "": invalid syntax 2026-01-24T11:27:02Z INFO management/server/idp/embedded.go:200: embedded Dex IDP initialized with issuer: https://netbird.[redacted]/oauth2 2026-01-24T11:27:02Z INFO management/server/account_request_buffer.go:45: set account request buffer interval to 100ms 2026-01-24T11:27:02Z WARN management/internals/controllers/network_map/controller/controller.go:626: failed to parse peer update interval, using default value 1ms: strconv.Atoi: parsing "": invalid syntax 2026-01-24T11:27:02Z INFO management/internals/controllers/network_map/controller/controller.go:642: set peer update buffer interval to 1ms 2026-01-24T11:27:02Z INFO management/server/account.go:234: single account mode enabled, accounts number 1 2026-01-24T11:27:02Z ERRO [keysLocation: http://localhost:80/oauth2/keys] shared/auth/jwt/validator.go:76: could not get keys from location: Get "http://localhost:80/oauth2/keys": dial tcp [::1]:80: connect: connection refused 2026-01-24T11:27:02Z INFO management/internals/server/server.go:149: running gRPC backward compatibility server: [::]:33073 2026-01-24T11:27:02Z INFO management/internals/server/server.go:187: management server version 0.63.0 2026-01-24T11:27:02Z INFO management/internals/server/server.go:188: running HTTP server and gRPC server on the same port: [::]:80 2026-01-24T11:27:02Z INFO management/internals/server/server.go:194: your management version, "0.63.0", is outdated, a new management version is available. Learn more here: https://github.com/netbirdio/netbird/releases 2026-01-24T23:27:02Z INFO management/server/metrics/selfhosted.go:156: sent anonymous metrics, next push will happen in 12h0m0s. You can disable these metrics by running with flag --disable-anonymous-metrics, see more information at https://docs.netbird.io/about-netbird/faq#why-and-what-are-the-anonymous-usage-metrics 2026-01-25T11:27:02Z INFO management/server/metrics/selfhosted.go:156: sent anonymous metrics, next push will happen in 12h0m0s. You can disable these metrics by running with flag --disable-anonymous-metrics, see more information at https://docs.netbird.io/about-netbird/faq#why-and-what-are-the-anonymous-usage-metrics 2026-01-25T23:27:02Z INFO management/server/metrics/selfhosted.go:156: sent anonymous metrics, next push will happen in 12h0m0s. You can disable these metrics by running with flag --disable-anonymous-metrics, see more information at https://docs.netbird.io/about-netbird/faq#why-and-what-are-the-anonymous-usage-metrics 2026-01-26T11:27:02Z INFO management/server/metrics/selfhosted.go:156: sent anonymous metrics, next push will happen in 12h0m0s. You can disable these metrics by running with flag --disable-anonymous-metrics, see more information at https://docs.netbird.io/about-netbird/faq#why-and-what-are-the-anonymous-usage-metrics 2026-01-26T23:27:02Z INFO management/server/metrics/selfhosted.go:156: sent anonymous metrics, next push will happen in 12h0m0s. You can disable these metrics by running with flag --disable-anonymous-metrics, see more information at https://docs.netbird.io/about-netbird/faq#why-and-what-are-the-anonymous-usage-metrics 2026-01-27T11:27:02Z INFO management/server/metrics/selfhosted.go:156: sent anonymous metrics, next push will happen in 12h0m0s. You can disable these metrics by running with flag --disable-anonymous-metrics, see more information at https://docs.netbird.io/about-netbird/faq#why-and-what-are-the-anonymous-usage-metrics 2026-01-27T12:56:40Z WARN [context: GRPC, requestID: d5sbc26jm9hs73b9aul0, accountID: d5ifaoejm9hs73aiiurg, peerID: fxn[redacted]] management/internals/shared/grpc/server.go:606: failed logging in peer fxn[redacted]: peer login has expired, please log in once more 2026-01-27T12:57:02Z INFO management/internals/server/server.go:194: your management version, "0.63.0", is outdated, a new management version is available. Learn more here: https://github.com/netbirdio/netbird/releases 2026-01-27T13:34:04Z WARN [context: GRPC, requestID: d5sbtj6jm9hs73b9aun0, accountID: d5ifaoejm9hs73aiiurg, peerID: fxn[redacted]] management/internals/shared/grpc/server.go:606: failed logging in peer fxn[redacted]: peer login has expired, please log in once more 2026-01-27T13:43:02Z WARN [context: GRPC, requestID: d5sc1pmjm9hs73b9auo0, accountID: d5ifaoejm9hs73aiiurg, peerID: fxn[redacted]] management/internals/shared/grpc/server.go:606: failed logging in peer fxn[redacted]: peer login has expired, please log in once more 2026-01-27T15:00:42Z WARN [context: GRPC, requestID: d5sd66mjm9hs73b9aup0, accountID: d5ifaoejm9hs73aiiurg, peerID: fxn[redacted]] management/internals/shared/grpc/server.go:606: failed logging in peer fxn[redacted]: peer login has expired, please log in once more 2026-01-27T15:27:02Z ERRO version/update.go:145: failed to fetch version info: Get "https://pkgs.netbird.io/releases/latest/version": dial tcp 5.22.212.152:443: connect: connection refused 2026-01-27T15:33:26Z WARN [peerID: fxn[redacted], context: GRPC, requestID: d5sdlhmjm9hs73b9auq0, accountID: d5ifaoejm9hs73aiiurg] management/internals/shared/grpc/server.go:606: failed logging in peer fxn[redacted]: peer login has expired, please log in once more 2026-01-27T15:57:02Z ERRO version/update.go:145: failed to fetch version info: Get "https://pkgs.netbird.io/releases/latest/version": dial tcp 5.22.212.152:443: connect: connection refused 2026-01-27T23:27:02Z INFO management/server/metrics/selfhosted.go:156: sent anonymous metrics, next push will happen in 12h0m0s. You can disable these metrics by running with flag --disable-anonymous-metrics, see more information at https://docs.netbird.io/about-netbird/faq#why-and-what-are-the-anonymous-usage-metrics ``` - Dashboard version and management version: ```shell IMAGE ID DISK USAGE CONTENT SIZE EXTRA caddy:latest 2adb640cdc0c 83.2MB 22.8MB U coturn/coturn:latest 5de3fc6be2da 170MB 45.4MB U netbirdio/dashboard:latest 654169f1c4aa 201MB 46.3MB netbirdio/management:latest 2c84f4331a3e 290MB 88.7MB netbirdio/relay:latest dde7542e5dd9 59.7MB 15.9MB netbirdio/signal:latest bb93ccefde0a 60.3MB 16.1MB ```
Author
Owner

@skabbes commented on GitHub (Feb 1, 2026):

My Specs

  • Using embedded IdP: Yes
  • Which IdP? Whatever is embedded, Dex it seems.
  • Open browser console and share the console output and HAR file. Other than "Navigated to https://netbird.mydomain.com/" there is no console output". I'd prefer not to share my HAR file for now.
  • Does the issue happen when you open an incognito window? Yes. And a different browsers. Additionally it stalls over curl.
  • Management logs
  • Dashboard version and management version 0.64.1, though I just upgraded to 0.64.4 and the problem persists

This hit me again today, out of frustration I tried to upgrade to 0.64.4 to see if the issue was fixed, and not it appears to be worse. I narrowed it down to the /oauth2/auth endpoint

curl -v https://netbird.MYDOMAIN.COM/oauth2/auth

After I upgraded, I tried all combinations of the following

  1. Force refresh / hard reload
  2. Chrome in incognito mode
  3. Different browser entirely (Firefox)
  4. Different computer entirely
  5. From my mobile device, using mobile data
  6. Using http 2
  7. Using http 1
  8. Using ipv4
  9. Using ipv6
  10. From behind my reverse proxy (curl -v localhost:33073/oauth2/auth)
  11. From inside the management container docker exec -it ...

All of the requests hang indefinitely.

I used to be able to docker compose down && docker compose up -d. but after upgrade to 0.64.4 that does not work. I think likely a coincidence...

Update
On 0.64.4 I was able to get this work again with docker compose restart. Though I'm not sure exactly what I did to get it to fix.

<!-- gh-comment-id:3832190161 --> @skabbes commented on GitHub (Feb 1, 2026): **My Specs** - Using embedded IdP: **Yes** - Which IdP? Whatever is embedded, Dex it seems. - Open browser console and share the console output and HAR file. Other than "Navigated to https://netbird.mydomain.com/" there is no console output". I'd prefer not to share my HAR file for now. - Does the issue happen when you open an incognito window? Yes. And a different browsers. Additionally it stalls over curl. - Management logs - Dashboard version and management version 0.64.1, though I just upgraded to 0.64.4 and the problem persists This hit me again today, out of frustration I tried to upgrade to 0.64.4 to see if the issue was fixed, and not it appears to be worse. I narrowed it down to the `/oauth2/auth` endpoint ``` curl -v https://netbird.MYDOMAIN.COM/oauth2/auth ``` After I upgraded, I tried all combinations of the following 1. Force refresh / hard reload 2. Chrome in incognito mode 3. Different browser entirely (Firefox) 4. Different computer entirely 5. From my mobile device, using mobile data 6. Using http 2 7. Using http 1 8. Using ipv4 9. Using ipv6 10. From behind my reverse proxy (`curl -v localhost:33073/oauth2/auth`) 11. From inside the management container `docker exec -it ...` All of the requests hang indefinitely. I used to be able to `docker compose down && docker compose up -d`. but after upgrade to 0.64.4 that does not work. I think likely a coincidence... **Update** On 0.64.4 I was able to get this work again with `docker compose restart`. Though I'm not sure exactly what I did to get it to fix.
Author
Owner

@skabbes commented on GitHub (Feb 8, 2026):

Out of desperation, I switched my IdP to PocketID and have not had issues since.

<!-- gh-comment-id:3867425447 --> @skabbes commented on GitHub (Feb 8, 2026): Out of desperation, I switched my IdP to PocketID and have not had issues since.
Author
Owner

@helioloureiro commented on GitHub (Feb 24, 2026):

Yesterday I upgraded to latest version.

It worked quite well but today...

Image

It would be nice to have further information to troubleshooting the issue.

Current container image versions:

# docker images
                                                                                                                                                                                                                                                                                                                                i Info →   U  In Use
IMAGE                         ID             DISK USAGE   CONTENT SIZE   EXTRA
caddy:latest                  9068f76202c0       87.9MB         24.1MB    U   
coturn/coturn:latest          254a7e19f233        170MB         45.4MB    U   
netbirdio/dashboard:latest    f9ea22ff0b3e        205MB         47.1MB    U   
netbirdio/management:latest   875409ecf09f        293MB         89.8MB    U   
netbirdio/relay:latest        4a501558e699       62.2MB         16.9MB    U   
netbirdio/signal:latest       3facab742f6e       62.8MB         17.1MB    U   
<!-- gh-comment-id:3950680064 --> @helioloureiro commented on GitHub (Feb 24, 2026): Yesterday I upgraded to latest version. It worked quite well but today... <img width="1619" height="808" alt="Image" src="https://github.com/user-attachments/assets/7e2e7722-141a-4531-91c3-d5a5372a7f14" /> It would be nice to have further information to troubleshooting the issue. Current container image versions: ```shell # docker images i Info → U In Use IMAGE ID DISK USAGE CONTENT SIZE EXTRA caddy:latest 9068f76202c0 87.9MB 24.1MB U coturn/coturn:latest 254a7e19f233 170MB 45.4MB U netbirdio/dashboard:latest f9ea22ff0b3e 205MB 47.1MB U netbirdio/management:latest 875409ecf09f 293MB 89.8MB U netbirdio/relay:latest 4a501558e699 62.2MB 16.9MB U netbirdio/signal:latest 3facab742f6e 62.8MB 17.1MB U ```
Author
Owner

@helioloureiro commented on GitHub (Feb 24, 2026):

And I got back online running the sqlite3 clean trick. I will keep watching to see if lasts longer than a couple days.

<!-- gh-comment-id:3950709095 --> @helioloureiro commented on GitHub (Feb 24, 2026): And I got back online running the `sqlite3` clean trick. I will keep watching to see if lasts longer than a couple days.
Author
Owner

@heymoe commented on GitHub (Feb 24, 2026):

I haven't run into this issue in a while. I'm not sure if related but I did upgrade my setup from the multi-container + external caddy deployment to the current unified netbird-server container + default traefik deployment for the reverse proxy support. I'm still using Authentik for external IdP.

On a side note, The last time I thought I was having the stalled login screen I wondered away from my computer for maybe 30-45 seconds and when I got back I was sitting at the login screen. As if the stalled screen was trying to do something in the background which eventually timed out and then finally loading the login screen. I didn't have to restart Netbird or do anything manual to get the login screen working again.

<!-- gh-comment-id:3952444825 --> @heymoe commented on GitHub (Feb 24, 2026): I haven't run into this issue in a while. I'm not sure if related but I did upgrade my setup from the multi-container + external caddy deployment to the current unified netbird-server container + default traefik deployment for the reverse proxy support. I'm still using Authentik for external IdP. On a side note, The last time I thought I was having the stalled login screen I wondered away from my computer for maybe 30-45 seconds and when I got back I was sitting at the login screen. As if the stalled screen was trying to do something in the background which eventually timed out and then finally loading the login screen. I didn't have to restart Netbird or do anything manual to get the login screen working again.
Author
Owner

@erdelmaero commented on GitHub (Apr 24, 2026):

Update — resolved! My original analysis was wrong: this is not an upstream bug, it was a config/docs discoverability issue on our side.

The fix for Microsoft Entra + self-hosted (dashboard v2.37, management v0.69) is documented in netbirdio/docs/integrations/identity-providers/self-hosted/azure-ad.md and what actually works is:

AUTH_REDIRECT_URI=/auth
AUTH_SILENT_REDIRECT_URI=/silent-auth
AUTH_SUPPORTED_SCOPES=openid profile email offline_access api://<application_id>/api

And in the Entra app registration, register both as SPA redirect URIs:

  • https://<netbird-domain>/auth
  • https://<netbird-domain>/silent-auth

Also confirm AuthUserIDClaim=oid in management.json.

Why /peers / /#callback / etc. all failed for me, for context:

  • /#callback (dashboard's default): Entra strips the fragment from the redirect in the authorization-code flow, so the library's callback matcher (getPath() in @axa-fr/react-oidc) never matches the returned URL → dashboard loops re-initiating auth.
  • /peers: even though getPath would theoretically match, the root / and other paths in the dashboard auto-redirect and strip the ?code=... before the OIDC library can process it.
  • /auth / /silent-auth: these 404 at nginx but the generated 404 page still includes the full React app (and therefore OidcProvider), so callback processing completes cleanly. The library's path match finds "/auth" equal to "/auth" and processes the code.

Closing my report as PEBKAC — the only real gap is that this exact working config is not surfaced in setup.env.example or the selfhosted-quickstart walkthrough for Entra users. Thanks @vgauzzi's closing comment on netbirdio/dashboard#609 which pointed me at the azure-ad guide.

<!-- gh-comment-id:4312095161 --> @erdelmaero commented on GitHub (Apr 24, 2026): **Update — resolved!** My original analysis was wrong: this is not an upstream bug, it was a config/docs discoverability issue on our side. The fix for Microsoft Entra + self-hosted (dashboard v2.37, management v0.69) is documented in [netbirdio/docs/integrations/identity-providers/self-hosted/azure-ad.md](https://github.com/netbirdio/docs/blob/main/docs/integrations/identity-providers/self-hosted/azure-ad.md) and what actually works is: ```env AUTH_REDIRECT_URI=/auth AUTH_SILENT_REDIRECT_URI=/silent-auth AUTH_SUPPORTED_SCOPES=openid profile email offline_access api://<application_id>/api ``` And in the Entra app registration, register **both** as SPA redirect URIs: - `https://<netbird-domain>/auth` - `https://<netbird-domain>/silent-auth` Also confirm `AuthUserIDClaim=oid` in `management.json`. Why `/peers` / `/#callback` / etc. all failed for me, for context: - `/#callback` (dashboard's default): Entra strips the fragment from the redirect in the authorization-code flow, so the library's callback matcher (`getPath()` in `@axa-fr/react-oidc`) never matches the returned URL → dashboard loops re-initiating auth. - `/peers`: even though `getPath` would theoretically match, the root `/` and other paths in the dashboard auto-redirect and strip the `?code=...` before the OIDC library can process it. - `/auth` / `/silent-auth`: these 404 at nginx but the generated 404 page still includes the full React app (and therefore `OidcProvider`), so callback processing completes cleanly. The library's path match finds `"/auth"` equal to `"/auth"` and processes the code. Closing my report as PEBKAC — the only real gap is that this exact working config is not surfaced in `setup.env.example` or the selfhosted-quickstart walkthrough for Entra users. Thanks @vgauzzi's closing comment on [netbirdio/dashboard#609](https://github.com/netbirdio/dashboard/issues/609) which pointed me at the azure-ad guide.
Sign in to join this conversation.
No Label triage-needed
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: DYNR/netbird#9968