Non whitelisted IPs have no authentication #17437

New issue

Open

opened 2026-02-22 03:50:37 -05:00 by deekerman · 2 comments

deekerman commented

2026-02-22 03:50:37 -05:00

Owner

Originally created by @bilogic on GitHub (Jan 10, 2026).

qBittorrent & operating system versions

qBitorrent 5.1.4
OS: ubuntu 22.04

What is the problem?

I want auth when accessing from internet but no auth when on my home machine

My setup is SNI passthru via HA proxy -> Nginx Proxy Manager -> qBitorrent
I added WebUI\AuthSubnetWhitelist=192.x.x.0/24 and WebUI\AuthSubnetWhitelistEnabled=true
But there is no auth when accessing from internet

Steps to reproduce

added WebUI\AuthSubnetWhitelist=192.x.x.0/24 and WebUI\AuthSubnetWhitelistEnabled=true
restart qBitorrent

Additional context

No response

Log(s) & preferences file(s)

[Application]
FileLogger\Age=1
FileLogger\AgeType=1
FileLogger\Backup=true
FileLogger\DeleteOld=true
FileLogger\Enabled=true
FileLogger\MaxSizeBytes=66560
FileLogger\Path=/config/qBittorrent/logs

[AutoRun]
enabled=false
program=

[BitTorrent]
Session\AddTorrentStopped=false
Session\DefaultSavePath=/downloads/
Session\ExcludedFileNames=
Session\Port=6881
Session\QueueingSystemEnabled=true
Session\SSL\Port=9999
Session\ShareLimitAction=Stop
Session\TempPath=/downloads/incomplete/

[Core]
AutoDeleteAddedTorrentFile=Never

[LegalNotice]
Accepted=true

[Meta]
MigrationVersion=8

[Network]
Cookies=@Invalid()
PortForwardingEnabled=false
Proxy\HostnameLookupEnabled=false
Proxy\Profiles\BitTorrent=true
Proxy\Profiles\Misc=true
Proxy\Profiles\RSS=true

[Preferences]
Connection\PortRangeMin=6881
Connection\UPnP=false
Downloads\SavePath=/downloads/
Downloads\TempPath=/downloads/incomplete/
General\Locale=en
MailNotification\req_auth=true
WebUI\Address=*
WebUI\AlternativeUIEnabled=true
WebUI\AuthSubnetWhitelist=192.x.x.0/24
WebUI\AuthSubnetWhitelistEnabled=true
WebUI\LocalHostAuth=false
WebUI\Password_PBKDF2="@ByteArray(yZuLKk8CHG4WQWuZe4yX5w==:LVk9tGF2jaD0Pn2vUOUZi5zYzw4AEazHQ4GScL3o3KO72tI2JL1Q/ZnRIHhAmztziDIz8lWMBRRJjRQkBjHyMw==)"
WebUI\ReverseProxySupportEnabled=true
WebUI\RootFolder=/vuetorrent
WebUI\ServerDomains=*
WebUI\TrustedReverseProxiesList=192.x.x.3

[RSS]
AutoDownloader\DownloadRepacks=true
AutoDownloader\SmartEpisodeFilter=s(\\d+)e(\\d+), (\\d+)x(\\d+), "(\\d{4}[.\\-]\\d{1,2}[.\\-]\\d{1,2})", "(\\d{1,2}[.\\-]\\d{1,2}[.\\-]\\d{4})"

Originally created by @bilogic on GitHub (Jan 10, 2026). ### qBittorrent & operating system versions qBitorrent 5.1.4 OS: ubuntu 22.04 ### What is the problem? I want auth when accessing from internet but no auth when on my home machine 1. My setup is SNI passthru via HA proxy -> Nginx Proxy Manager -> qBitorrent 2. I added `WebUI\AuthSubnetWhitelist=192.x.x.0/24` and `WebUI\AuthSubnetWhitelistEnabled=true` 3. But there is no auth when accessing from internet ### Steps to reproduce added `WebUI\AuthSubnetWhitelist=192.x.x.0/24` and `WebUI\AuthSubnetWhitelistEnabled=true` restart qBitorrent ### Additional context _No response_ ### Log(s) & preferences file(s) ``` [Application] FileLogger\Age=1 FileLogger\AgeType=1 FileLogger\Backup=true FileLogger\DeleteOld=true FileLogger\Enabled=true FileLogger\MaxSizeBytes=66560 FileLogger\Path=/config/qBittorrent/logs [AutoRun] enabled=false program= [BitTorrent] Session\AddTorrentStopped=false Session\DefaultSavePath=/downloads/ Session\ExcludedFileNames= Session\Port=6881 Session\QueueingSystemEnabled=true Session\SSL\Port=9999 Session\ShareLimitAction=Stop Session\TempPath=/downloads/incomplete/ [Core] AutoDeleteAddedTorrentFile=Never [LegalNotice] Accepted=true [Meta] MigrationVersion=8 [Network] Cookies=@Invalid() PortForwardingEnabled=false Proxy\HostnameLookupEnabled=false Proxy\Profiles\BitTorrent=true Proxy\Profiles\Misc=true Proxy\Profiles\RSS=true [Preferences] Connection\PortRangeMin=6881 Connection\UPnP=false Downloads\SavePath=/downloads/ Downloads\TempPath=/downloads/incomplete/ General\Locale=en MailNotification\req_auth=true WebUI\Address=* WebUI\AlternativeUIEnabled=true WebUI\AuthSubnetWhitelist=192.x.x.0/24 WebUI\AuthSubnetWhitelistEnabled=true WebUI\LocalHostAuth=false WebUI\Password_PBKDF2="@ByteArray(yZuLKk8CHG4WQWuZe4yX5w==:LVk9tGF2jaD0Pn2vUOUZi5zYzw4AEazHQ4GScL3o3KO72tI2JL1Q/ZnRIHhAmztziDIz8lWMBRRJjRQkBjHyMw==)" WebUI\ReverseProxySupportEnabled=true WebUI\RootFolder=/vuetorrent WebUI\ServerDomains=* WebUI\TrustedReverseProxiesList=192.x.x.3 [RSS] AutoDownloader\DownloadRepacks=true AutoDownloader\SmartEpisodeFilter=s(\\d+)e(\\d+), (\\d+)x(\\d+), "(\\d{4}[.\\-]\\d{1,2}[.\\-]\\d{1,2})", "(\\d{1,2}[.\\-]\\d{1,2}[.\\-]\\d{4})" ```

deekerman added the

WebUI

label

2026-02-22 03:50:37 -05:00

deekerman commented

2026-02-22 03:50:40 -05:00

Author

Owner

@Piccirello commented on GitHub (Jan 23, 2026):

qBittorrent is seeing the IP address of your proxy. Check out the "Enable reverse proxy support" setting.

@Piccirello commented on GitHub (Jan 23, 2026): qBittorrent is seeing the IP address of your proxy. Check out the "Enable reverse proxy support" setting.

deekerman commented

2026-02-22 03:50:40 -05:00

Author

Owner

@bilogic commented on GitHub (Jan 23, 2026):

Did you see the line WebUI\ReverseProxySupportEnabled=true?

@bilogic commented on GitHub (Jan 23, 2026): Did you see the line `WebUI\ReverseProxySupportEnabled=true`?