[Notice] 403 Forbidden "Request forbidden by administrative rules" (socket-proxy update)

[viggy96]

What’s the bug?

Trying to view logs for any container throws an error

Description

Clicking "logs" results in an error

Expected behaviour

Logs should show

To reproduce

1. Login
2. Go to containers
3. Click on container
4. Click logs
5. Profit

Platform

Chrome Linux: Version 152.0.7977.64

Versions

Docker image: 1.36.0

Relevant log output

BACKEND - ERROR - AgentClient: Agent request error
tugtainer-1  | Traceback (most recent call last):
tugtainer-1  |   File "/app/backend/core/agent_client.py", line 149, in _request
tugtainer-1  |     resp.raise_for_status()
tugtainer-1  |     ~~~~~~~~~~~~~~~~~~~~~^^
tugtainer-1  |   File "/app/.venv/lib/python3.13/site-packages/aiohttp/client_reqrep.py", line 655, in raise_for_status
tugtainer-1  |     raise ClientResponseError(
tugtainer-1  |     ...<5 lines>...
tugtainer-1  |     )
tugtainer-1  | aiohttp.client_exceptions.ClientResponseError: 424, message='Failed Dependency', url='http://127.0.0.1:8001/api/container/logs/service-jellyfin-1'

Extra

Agent secret is set correctly via environment variable and in the agent via the browser.

My Compose setup is available here: https://github.com/viggy96/container_config

[Quenary]

Hello, thanks for this report.

The 403 Forbidden error with the Request forbidden by administrative rules message is caused by a recent update to the linuxserver/socket-proxy image.

linuxserver/socket-proxy team introduced new granular access variables. The proxy now requires explicit permissions for endpoints that were previously covered by just CONTAINERS=1 and POST=1.

To fix this issue, you need to add the newly required ALLOW_* variables to your socket-proxy service in your docker-compose.yml. For Tugtainer to function properly, please add the following to your proxy environment variables:

    environment:
      # your existing variables plus these
      ALLOW_LOGS: 1
      ALLOW_START: 1
      ALLOW_STOP: 1
      ALLOW_RESTARTS: 1
      ALLOW_PAUSE: 1
      ALLOW_UNPAUSE: 1