Server not reachable

[kofinco]

The bug

I can access my immich server on anything web browser but i get a failure message when /api is added to :2283. this is preventing me from signing in on the IOS app when i try to enter the server endpoint url. removing /api does not do any good either

The OS that Immich Server is running on

Windows

Version of Immich Server

118.2

Version of Immich Mobile App

118.0

Platform with the issue

• Server
• Web
• Mobile

Your docker-compose.yml content

#
# WARNING: Make sure to use the docker-compose.yml of the current release:
#
# https://github.com/immich-app/immich/releases/latest/download/docker-compose.yml
#
# The compose file on main may not be compatible with the latest release.
#

name: immich

services:
  immich-server:
    container_name: immich_server
    image: ghcr.io/immich-app/immich-server:${IMMICH_VERSION:-release}
    # extends:
    #   file: hwaccel.transcoding.yml
    #   service: cpu # set to one of [nvenc, quicksync, rkmpp, vaapi, vaapi-wsl] for accelerated transcoding
    volumes:
      # Do not edit the next line. If you want to change the media storage location on your system, edit the value of UPLOAD_LOCATION in the .env file
      - ${UPLOAD_LOCATION}:/usr/src/app/upload
      - /etc/localtime:/etc/localtime:ro
    env_file:
      - .env
    ports:
      - 2283:2283
    depends_on:
      - redis
      - database
    restart: always
    healthcheck:
      disable: false

  immich-machine-learning:
    container_name: immich_machine_learning
    # For hardware acceleration, add one of -[armnn, cuda, openvino] to the image tag.
    # Example tag: ${IMMICH_VERSION:-release}-cuda
    image: ghcr.io/immich-app/immich-machine-learning:${IMMICH_VERSION:-release}
    # extends: # uncomment this section for hardware acceleration - see https://immich.app/docs/features/ml-hardware-acceleration
    #   file: hwaccel.ml.yml
    #   service: cpu # set to one of [armnn, cuda, openvino, openvino-wsl] for accelerated inference - use the `-wsl` version for WSL2 where applicable
    volumes:
      - model-cache:/cache
    env_file:
      - .env
    restart: always
    healthcheck:
      disable: false

  redis:
    container_name: immich_redis
    image: docker.io/redis:6.2-alpine@sha256:e3b17ba9479deec4b7d1eeec1548a253acc5374d68d3b27937fcfe4df8d18c7e
    healthcheck:
      test: redis-cli ping || exit 1
    restart: always

  database:
    container_name: immich_postgres
    image: docker.io/tensorchord/pgvecto-rs:pg14-v0.2.0@sha256:90724186f0a3517cf6914295b5ab410db9ce23190a2d9d0b9dd6463e3fa298f0
    environment:
      POSTGRES_PASSWORD: ${DB_PASSWORD}
      POSTGRES_USER: ${DB_USERNAME}
      POSTGRES_DB: ${DB_DATABASE_NAME}
      POSTGRES_INITDB_ARGS: '--data-checksums'
    volumes:
      # Do not edit the next line. If you want to change the database storage location on your system, edit the value of DB_DATA_LOCATION in the .env file
      - ${DB_DATA_LOCATION}:/var/lib/postgresql/data
    healthcheck:
      test: pg_isready --dbname='${DB_DATABASE_NAME}' --username='${DB_USERNAME}' || exit 1; Chksum="$$(psql --dbname='${DB_DATABASE_NAME}' --username='${DB_USERNAME}' --tuples-only --no-align --command='SELECT COALESCE(SUM(checksum_failures), 0) FROM pg_stat_database')"; echo "checksum failure count is $$Chksum"; [ "$$Chksum" = '0' ] || exit 1
      interval: 5m
      start_interval: 30s
      start_period: 5m
    command: ["postgres", "-c", "shared_preload_libraries=vectors.so", "-c", 'search_path="$$user", public, vectors', "-c", "logging_collector=on", "-c", "max_wal_size=2GB", "-c", "shared_buffers=512MB", "-c", "wal_compression=on"]
    restart: always

volumes:
  model-cache:

Your .env content

# You can find documentation for all the supported env variables at https://immich.app/docs/install/environment-variables

# The location where your uploaded files are stored
UPLOAD_LOCATION=./library
# The location where your database files are stored
DB_DATA_LOCATION=./postgres

# To set a timezone, uncomment the next line and change Etc/UTC to a TZ identifier from this list: https://en.wikipedia.org/wiki/List_of_tz_database_time_zones#List
# TZ=Etc/UTC

# The Immich version to use. You can pin this to a specific version like "v1.71.0"
IMMICH_VERSION=release

# Connection secret for postgres. You should change it to a random password
# Please use only the characters `A-Za-z0-9`, without special characters or spaces
DB_PASSWORD= mypassword



# The values below this line do not need to be changed
###################################################################################
DB_USERNAME=postgres
DB_DATABASE_NAME=immich

Reproduction steps

1. launch the immich app on windows and sign in
2. launch the IOS app and input the server endpoint url ':2283/api'
3. server is not reachable error
   ...

Relevant log output

Error while checking server availability

ApiException 400: Socket operation failed: GET /server/ping (Inner exception: ClientException with SocketException: Connection failed (OS Error: No route to host, errno = 65), address = 10.21.17.26, port = 2283, uri=http://10.21.17.26:2283/api/server/ping)

#0      IOClient.send (package:http/src/io_client.dart:154)
<asynchronous suspension>
#1      BaseClient._sendUnstreamed (package:http/src/base_client.dart:93)
<asynchronous suspension>
#2      ApiClient.invokeAPI (package:openapi/api_client.dart:101)
<asynchronous suspension>
#3      ServerApi.pingServer (package:openapi/api/server_api.dart:492)
<asynchronous suspension>
#4      Future.timeout.<anonymous closure> (dart:async/future_impl.dart:963)
<asynchronous suspension>
#5      ApiService._isEndpointAvailable (package:immich_mobile/services/api.service.dart:106)
<asynchronous suspension>
#6      ApiService._resolveEndpoint (package:immich_mobile/services/api.service.dart:87)
<asynchronous suspension>
#7      ApiService.resolveAndSetEndpoint (package:immich_mobile/services/api.service.dart:69)
<asynchronous suspension>
#8      LoginForm.build.getServerLoginCredential (package:immich_mobile/widgets/forms/login/login_form.dart:104)
<asynchronous suspension>

#0      ApiClient.invokeAPI (package:openapi/api_client.dart:104)
<asynchronous suspension>
#1      ServerApi.pingServer (package:openapi/api/server_api.dart:492)
<asynchronous suspension>
#2      Future.timeout.<anonymous closure> (dart:async/future_impl.dart:963)
<asynchronous suspension>
#3      ApiService._isEndpointAvailable (package:immich_mobile/services/api.service.dart:106)
<asynchronous suspension>
#4      ApiService._resolveEndpoint (package:immich_mobile/services/api.service.dart:87)
<asynchronous suspension>
#5      ApiService.resolveAndSetEndpoint (package:immich_mobile/services/api.service.dart:69)
<asynchronous suspension>
#6      LoginForm.build.getServerLoginCredential (package:immich_mobile/widgets/forms/login/login_form.dart:104)
<asynchronous suspension>

Additional information

No response

[bo0tzz]

Does your app have permissions to access the local network?

[kofinco]

yes it does

[danieldietzler]

Can you access immich in the browser on your phone?

[alextran1502]

Please make sure the URL start with http:// if you are using the local IP

[kofinco]

did that but the server is still not reachable

[bo0tzz]

Can you access it from the browser on your phone?

[kofinco]

yes i can using http:// myip :2283

[alextran1502]

It looks like a Windows firewall issue, then.

[welizeo]

Good point, I forgot to mention:

• I've reinstalled the app about 3-4 times now and allowed local network access every single time.
• I've also verified that this permission was actually granted configuration screen of the iPhone 13

[alextran1502]

Can you take a screenshot of the actual url you use for the server, and the double check to make sure you can access the server from the website?

[welizeo]

If use the mobile browser on the iPhone 13 to open :

• http://ip-address:port/api/server/ping I get {"res": "pong"}
• https://immich.my-domain/api/server/ping I also get {"res": "pong"}

But if I directly copy/paste either address in the mobile app (without and with up to "/api") I get the " no route to host, errno =65" message again.

I've also tried if a trailing slash makes a difference or not, but it doesn't.

If I copy the "uri" from the error in the app log back to the mobile browser again, I actually do get {"res": "pong"}.
It's starting to leave me quite stumped.

Is there any kind of resolving/routing difference between how a mobile app tries to connect to a URL ws. the mobile browser?(Edit: has Apple made changes in this area between iOS 16.7.8 and iOS 17.6.1? )

I mean.. something very strange is going on if I do get a ping response in the mobile browser when accessing the uri copied from the error log.

[alextran1502]

Can you please capture a screenshot of the local ip url screen?

[kofixsa]

It looks like a Windows firewall issue, then.

initially i couldn't access it from the browser. i had to add the immich port to the inbound rules in windows defender firewall to be able to access throught the browser.

"

another interesting thing is when i go to the URL myapi :2283/api/server/ping i get the "pong" response

everything was working just fine until today tho

update: i left everything and called it a day, returned the next day and tried again to see everything perfectly working

[welizeo]

Sure:

This cannot find the route to the host:

And this won't work either:

But the first one opened in the browser will show the Immich home / login screen ("/auth/login").
The second one opened in the browser will show {"res": "pong"}
Edit: So, even though I'm not using the standard port mapping to the Docker host. It is clearly reachable, otherwise the browser wouldn't have worked. At this port it is also reachable on the iPhone 8 (browser + app) and for other computers.

This same pattern applies to the attemps when using the domain name approach, but with the HTTPS scheme since that's using a reverse proxy + Let's Encrypt. This HTTP + domain name approach works fine on the iPhone 8. Refreshing it once more as I write this.

Edit 2:

And the LAN/network permissions are also enabled on the iPhone 3, as the top "Lokaal netwerk" (Dutch: Local Network) toggle indicates.

[welizeo]

Below one of the log entries that I'll get. And as mentioned before, if I paste uri "http://192.168.178.3:8081/api/server/ping" in the mobile browser, it works perfectly fine ?!?

Error while checking server availability

ApiException 400: Socket operation failed: GET /server/ping (Inner exception: ClientException with SocketException: Connection failed (OS Error: No route to host, errno = 65), address = 192.168.178.3, port = 8081, uri=http://192.168.178.3:8081/api/server/ping)

#0 IOClient.send (package:http/src/io_client.dart:154)

#1 BaseClient._sendUnstreamed (package:http/src/base_client.dart:93)

#2 ApiClient.invokeAPI (package:openapi/api_client.dart:101)

#3 ServerApi.pingServer (package:openapi/api/server_api.dart:492)

#4 Future.timeout. (dart:async/future_impl.dart:963)

#5 ApiService._isEndpointAvailable (package:immich_mobile/services/api.service.dart:106)

#6 ApiService._resolveEndpoint (package:immich_mobile/services/api.service.dart:87)

#7 ApiService.resolveAndSetEndpoint (package:immich_mobile/services/api.service.dart:69)

#8 LoginForm.build.getServerLoginCredential (package:immich_mobile/widgets/forms/login/login_form.dart:104)

[alextran1502]

Is 8081 the correct port? Can you double check it is not 2283?

[welizeo]

Yes, 8081 is the correct port.

As checked using the web browser on my laptop:

Also using cURL + HTTP + direct IP:

And the reverse proxy with HTTPS also functions (this one is used by the iPhone 8 for many months now):

Edit:

And from the logs of the Docker container:

` LOG [Api:Bootstrap] Immich Server is listening on http://[::1]:8080 [v1.119.1] [production]

Connection to localhost (127.0.0.1) 8080 port [tcp/http-alt] succeeded!

[ig-init] done.`

With the port mapping in the unRAID UI:

[alextran1502]

Just for sanity check, on the iPhone 13, can you go to the browser and access your instance at http://ip:8081 to see if the web page comes up?

If it does, then next try to access to demo instance by double tapping on the spinning logo. If you can log in then log out and try accessing your instance again

[welizeo]

Using the iPhone 13 browser, I can see the instances and successfully log in using http://ip:8081 and also using https://immich.domain.tld

Double tapping the spinning logo on the login screen only makes the interface zoom in on that region.
(Maybe it misunderstood you here..)

But I can visit https://demo.immich.app , log in and browse around there just fine using the browser.

After logging out from the demo site, I can visit the ip:8081 and https domain again just fine, log in and see the message to upload the first picture (setting up the iPhone 13 for a new user).

Going back to the app, trying the IP and domain name versions, with and without the "/api" suffix, I keep getting the "Error while checking server availability" - "No route to host" entry again in the log.

I've once again uninstalled and reinstalled the app on the iPhone 13. From the first time opening the app, I get the following order of log entries:

1

Message: Missing authentication, server, or endpoint info from the local store
From: Splashscreen

2

Message: Unable to login using offline or online methods - Logging out completely
From: Splashscreen

3

Message: Logout Failed
Details: LateInitializationError: Field 'authenticationApi' has not been initialized
From: AuthenticationNotifier

4

Error while checking server availability

ApiException 400: Socket operation failed: GET /server/ping (Inner exception: ClientException with SocketException: Connection failed (OS Error: No route to host, errno = 65), address = 192.168.178.3, port = 8081, uri=http://192.168.178.3:8081/api/server/ping)

#0      IOClient.send (package:http/src/io_client.dart:154)
<asynchronous suspension>
#1      BaseClient._sendUnstreamed (package:http/src/base_client.dart:93)
<asynchronous suspension>
#2      ApiClient.invokeAPI (package:openapi/api_client.dart:101)
<asynchronous suspension>
#3      ServerApi.pingServer (package:openapi/api/server_api.dart:492)
<asynchronous suspension>

• It isn't the server, ports or firewall because it works for for both iPhones from the browser.
• It isn't the iPhone 13 at the networking level (wifi, ip ranges, what have you) because it works from the browser
• It isn't the resolving of the domain, the reverse proxy or certificate issues outside the app because it works in the browser.

It's so weird. 🤷‍♂️ 🤔
(And the frustrating thing is that, whatever it is, it's probably an excruciatingly small detail)

[alextran1502]

No problem. Do you happen to have another machine/vm that is different from your current Immich instance to spin up a fresh one and try accessing that one?

[alextran1502]

@welizeo I think I know a solution. Can you restart your phone? This looks like iOS OS bug

[welizeo]

@welizeo I think I know a solution. Can you restart your phone? This looks like iOS OS bug

Just a quick reply to let you know that I'll test this phone restart as soon as possible and get back to you with the answers. Hopefully later this week. Currently busy and inconvenient to test this due to circumstances.

(BTW: Do you have a specific iOS OS bug in mind?)

[alextran1502]

@welizeo perhaps networking stack

[welizeo]

@alextran1502 My sincere apologies for the very belated reply due to (very shortly) put many life circumstances. It has only been a few moments ago that I had the chance to restart the phone continue the attemps. After this restart Immich was instantly able to connect to the server. No problems at all.

I have changed nothing, not on the phone nor on the server side, since the discussion that we had above. Simply continued from where we left off.

So it really looks like there was indeed something strange going on with the networking stack of the phone.
Never ever have seen such crazy (host/URL resolving) behaviour like this though..

[gadore]

I have the same issue on Android, newest Server and newest apk version. It just cannot login, keep showing the "Server not reachable" message. url with browser works fine. Don't know what happened. 2024-12-18, Pixel 5 with Android 14.

I reinstalled app and tried all step by step, still not good, with 10 more times click on logs and close, it suddenly switched to user and password input view. after I entered everything, it just logged me in. I don't know what happened. Nothing changes. In this mean time, immich website in browser worked fine on my android device. I'm sure it is the android apk's issue.

what's more ,every time I quit the app and relaunch again, It takes long time on launch view(show an icon of immich) before entering the timeline. And I cannot download any photo after login.

[gadore]

This is the recent log:
ApiException 400: Socket operation failed: GET /users (Inner exception: ClientException with SocketException: Connection failed (OS Error: Network is unreachable, errno = 101), address = immich.my-domain, port = 443, uri=https://immich.my-domain/api/users)

#0 IOClient.send (package:http/src/io_client.dart:154)

#1 BaseClient._sendUnstreamed (package:http/src/base_client.dart:93)

#2 ApiClient.invokeAPI (package:openapi/api_client.dart:101)

#3 UsersApi.searchUsers (package:openapi/api/users_api.dart:388)

#4 ApiRepository.checkNull (package:immich_mobile/repositories/api.repository.dart:5)

#5 UserApiRepository.getAll (package:immich_mobile/repositories/user_api.repository.dart:24)

#6 UserService.getUsersFromServer (package:immich_mobile/services/user.service.dart:57)

#7 UserService.refreshUsers (package:immich_mobile/services/user.service.dart:102)

#8 AssetNotifier.getAllAsset (package:immich_mobile/providers/asset.provider.dart:54)

I know it looks like the device cannot access my immich server, but I can view the url on the browser, everything works fine on the browser.

I assume whether is the proxy setting on my wifi ? or... I'm using cloudflare zero-trust to export the http://localip to a public ip ? Does this affect the connection of flutter ?

[gadore]

I test it out, for my case, it's proxy setting issue.

• Worked for my device with proxy setted in wifi.
• Test Only, need discussion and with more elegant method to fullfill it.
• Maybe proxy setting in app ?

See code below:

import 'package:http_proxy/http_proxy.dart';
// ……
void main() async {
  ImmichWidgetsBinding();
  final db = await loadDb();
  await initApp();
  await migrateDatabaseIfNeeded(db);
  HttpOverrides.global = HttpSSLCertOverride();

  // ######## NEW CODE AREA START
  WidgetsFlutterBinding.ensureInitialized();
  HttpProxy httpProxy = await HttpProxy.createHttpProxy();
  HttpOverrides.global = httpProxy;
  // ######## NEW CODE AREA END

  runApp(
    ProviderScope(
      overrides: [dbProvider.overrideWithValue(db)],
      child: const MainWidget(),
    ),
  );
}

[gadore]

@alextran1502 One possible conclusion for my case：Immich doesn't read and use mobile device's proxy setting. I have tested it out, after add proxy overide, it won't show "Server not reachable" again.