cant connect android app 3.0.32 to current latest synch server

[audricd]

Hello,

I have recently deployed Notesnook on a proxmox LXC container with stock docker compose and the following env:

# Description: Name of your self hosted instance. Used in the client apps for identification purposes
# Required: yes
# Example: notesnook-instance-sg
INSTANCE_NAME=labonotes

# Description: This secret is used for generating, validating, and introspecting auth tokens. It must be a randomly generated token (preferably >32 characters).
# Required: yes
NOTESNOOK_API_SECRET=some_secret

# Description: Use this flag to disable creation of new accounts on your instance (i.e. in case it is exposed to the Internet).
# Required: yes
# Possible values: true/false
DISABLE_SIGNUPS=false

### SMTP Configuration ###
# SMTP Configuration is required for sending emails for password reset, 2FA emails etc. You can get SMTP settings from your email provider.

# Description: Username for the SMTP connection (most time it is the email address of your account). Check your email provider's documentation to get the appropriate value.
# Required: yes
SMTP_USERNAME=admin@mail.lab
# Description: Password for the SMTP connection. Check your email provider's documentation to get the appropriate value.
# Required: yes
SMTP_PASSWORD=some_password
# Description: Host on which the the SMTP connection is running. Check your email provider's documentation to get the appropriate value.
# Required: yes
# Example: smtp.gmail.com
SMTP_HOST=mail.lab
# Description: Port on which the the SMTP connection is running. Check your email provider's documentation to get the appropriate value.
# Required: yes
# Example: 465
SMTP_PORT=587

# Description: Twilio account SID is required for sending SMS with 2FA codes. Learn more here: https://help.twilio.com/articles/14726256820123-What-is-a-Twilio-Account-SID-and-where-can-I-find-it-
# Required: no
#TWILIO_ACCOUNT_SID=
# Description: Twilio account auth is required for sending SMS with 2FA codes. Learn more here: https://help.twilio.com/articles/223136027-Auth-Tokens-and-How-to-Change-Them
# Required: no
#TWILIO_AUTH_TOKEN=
# Description: The unique string that we created to identify the Service resource.
# Required: no
# Example: VAaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
#TWILIO_SERVICE_SID=

# Description: Add the origins for which you want to allow CORS. Leave it empty to allow all origins to access your server. If you want to allow multiple origins, seperate each origin with a comma.
# Required: no
# Example: https://app.notesnook.com,http://localhost:3000
NOTESNOOK_CORS_ORIGINS=

# Description: This is the public URL for the web app, and is used by the backend for creating redirect URLs (e.g. after email confirmation etc). 
# Note: the URL has no slashes at the end
# Required: yes
# Example: https://app.notesnook.com
NOTESNOOK_APP_PUBLIC_URL=https://app.notes.lab
# Description: This is the public URL for the monograph frontend.
# Required: yes
# Example: https://monogr.ph
MONOGRAPH_PUBLIC_URL=http://monograph.notes.lab
# Description: This is the public URL for the Authentication server. Used for generating email confirmation & password reset URLs.
# Required: yes
# Example: https://auth.streetwriters.co
AUTH_SERVER_PUBLIC_URL=http://auth.notes.lab
# Description: This is the public URL for the S3 attachments server (minio). It'll be used by the Notesnook clients for uploading/downloading attachments.
# Required: yes
# Example: https://attachments.notesnook.com
ATTACHMENTS_SERVER_PUBLIC_URL=http://attachments.notes.lab

# Description: Custom username for the root Minio account. Minio is used for storing your attachments. This must be greater than 3 characters in length.
# Required: no
MINIO_ROOT_USER=some_user
# Description: Custom password for the root Minio account. Minio is used for storing your attachments. This must be greater than 8 characters in length.
# Required: no
MINIO_ROOT_PASSWORD=some_other_password

everything is running into a closed network. the host can reach the internet, so the docker images can be updated, but nothing is exposed except on an internal closed network, tailscale.

it does work, because on my workstations i can connect successfully.

however, i cannot connect from my phone, android 15 OppoA98 stock, app 3.0.32. i have uninstalled, reinstalled, clear data but there is no way i can validate synch server

i have tried local network (wifi) with and without tailscale connected. URL and IP:PORT. everytime it throws me that error message which appears incredibly quick, its like not even trying.

this is my docker synch server log:

root@notes:~# docker logs notes-notesnook-server-1 
warn: Microsoft.AspNetCore.DataProtection.Repositories.FileSystemXmlRepository[60]
      Unknown proxy: [::ffff:192.168.236.101]:55904
warn: Microsoft.AspNetCore.HttpOverrides.ForwardedHeadersMiddleware[1]
      Unknown proxy: [::ffff:192.168.236.101]:55910
warn: Microsoft.AspNetCore.HttpOverrides.ForwardedHeadersMiddleware[1]
      Unknown proxy: [::ffff:192.168.236.101]:55912
warn: Microsoft.AspNetCore.HttpOverrides.ForwardedHeadersMiddleware[1]
      Unknown proxy: [::ffff:192.168.236.101]:49422
warn: Microsoft.AspNetCore.HttpOverrides.ForwardedHeadersMiddleware[1]
      Unknown proxy: [::ffff:192.168.236.101]:49438
warn: Microsoft.AspNetCore.HttpOverrides.ForwardedHeadersMiddleware[1]
      Unknown proxy: [::ffff:192.168.236.101]:56654
warn: Microsoft.AspNetCore.HttpOverrides.ForwardedHeadersMiddleware[1]
      Unknown proxy: [::ffff:192.168.236.101]:35382
warn: Microsoft.AspNetCore.HttpOverrides.ForwardedHeadersMiddleware[1]
      Unknown proxy: [::ffff:192.168.236.101]:42430
warn: Microsoft.AspNetCore.HttpOverrides.ForwardedHeadersMiddleware[1]
      Unknown proxy: [::ffff:192.168.236.101]:58268
warn: Microsoft.AspNetCore.HttpOverrides.ForwardedHeadersMiddleware[1]
      Unknown proxy: [::ffff:192.168.236.101]:58272
warn: Microsoft.AspNetCore.HttpOverrides.ForwardedHeadersMiddleware[1]
      Unknown proxy: [::ffff:192.168.236.101]:58134
warn: Microsoft.AspNetCore.HttpOverrides.ForwardedHeadersMiddleware[1]
      Unknown proxy: [::ffff:192.168.236.101]:58646
warn: Microsoft.AspNetCore.HttpOverrides.ForwardedHeadersMiddleware[1]
      Unknown proxy: [::ffff:192.168.236.101]:50802
warn: Microsoft.AspNetCore.HttpOverrides.ForwardedHeadersMiddleware[1]
      Unknown proxy: [::ffff:192.168.236.101]:59782
warn: Microsoft.AspNetCore.HttpOverrides.ForwardedHeadersMiddleware[1]
      Unknown proxy: [::ffff:192.168.236.101]:37024
warn: Microsoft.AspNetCore.HttpOverrides.ForwardedHeadersMiddleware[1]
      Unknown proxy: [::ffff:192.168.236.101]:37028
warn: Microsoft.AspNetCore.HttpOverrides.ForwardedHeadersMiddleware[1]
      Unknown proxy: [::ffff:192.168.236.101]:53148
warn: Microsoft.AspNetCore.HttpOverrides.ForwardedHeadersMiddleware[1]
      Unknown proxy: [::ffff:192.168.236.101]:53164
warn: Microsoft.AspNetCore.HttpOverrides.ForwardedHeadersMiddleware[1]
      Unknown proxy: [::ffff:192.168.236.101]:53170
warn: Microsoft.AspNetCore.HttpOverrides.ForwardedHeadersMiddleware[1]
      Unknown proxy: [::ffff:192.168.236.101]:53186
warn: Microsoft.AspNetCore.HttpOverrides.ForwardedHeadersMiddleware[1]
      Unknown proxy: [::ffff:192.168.236.101]:40088
warn: Microsoft.AspNetCore.HttpOverrides.ForwardedHeadersMiddleware[1]
      Unknown proxy: [::ffff:192.168.236.101]:40096
warn: Microsoft.AspNetCore.HttpOverrides.ForwardedHeadersMiddleware[1]
      Unknown proxy: [::ffff:192.168.236.101]:55298
warn: Microsoft.AspNetCore.HttpOverrides.ForwardedHeadersMiddleware[1]
      Unknown proxy: [::ffff:192.168.236.101]:55306
warn: Microsoft.AspNetCore.HttpOverrides.ForwardedHeadersMiddleware[1]
      Unknown proxy: [::ffff:192.168.236.101]:45126
warn: Microsoft.AspNetCore.HttpOverrides.ForwardedHeadersMiddleware[1]
      Unknown proxy: [::ffff:192.168.236.101]:52248
warn: Microsoft.AspNetCore.HttpOverrides.ForwardedHeadersMiddleware[1]
      Unknown proxy: [::ffff:192.168.236.101]:36980
warn: Microsoft.AspNetCore.HttpOverrides.ForwardedHeadersMiddleware[1]
      Unknown proxy: [::ffff:192.168.236.101]:36984
warn: Microsoft.AspNetCore.HttpOverrides.ForwardedHeadersMiddleware[1]
      Unknown proxy: [::ffff:192.168.236.101]:36996
warn: Microsoft.AspNetCore.HttpOverrides.ForwardedHeadersMiddleware[1]
      Unknown proxy: [::ffff:192.168.236.101]:58830
warn: Microsoft.AspNetCore.HttpOverrides.ForwardedHeadersMiddleware[1]
      Unknown proxy: [::ffff:192.168.236.101]:54752
warn: Microsoft.AspNetCore.HttpOverrides.ForwardedHeadersMiddleware[1]
      Unknown proxy: [::ffff:192.168.236.101]:34018
warn: Microsoft.AspNetCore.HttpOverrides.ForwardedHeadersMiddleware[1]
      Unknown proxy: [::ffff:192.168.236.101]:43378
warn: Microsoft.AspNetCore.HttpOverrides.ForwardedHeadersMiddleware[1]
      Unknown proxy: [::ffff:192.168.236.101]:58268
warn: Microsoft.AspNetCore.HttpOverrides.ForwardedHeadersMiddleware[1]
      Unknown proxy: [::ffff:192.168.236.101]:58272
warn: Microsoft.AspNetCore.HttpOverrides.ForwardedHeadersMiddleware[1]
      Unknown proxy: [::ffff:192.168.236.101]:58134
warn: Microsoft.AspNetCore.HttpOverrides.ForwardedHeadersMiddleware[1]
      Unknown proxy: [::ffff:192.168.236.101]:58646
warn: Microsoft.AspNetCore.HttpOverrides.ForwardedHeadersMiddleware[1]
      Unknown proxy: [::ffff:192.168.236.101]:50802
warn: Microsoft.AspNetCore.HttpOverrides.ForwardedHeadersMiddleware[1]
      Unknown proxy: [::ffff:192.168.236.101]:59782
warn: Microsoft.AspNetCore.HttpOverrides.ForwardedHeadersMiddleware[1]
      Unknown proxy: [::ffff:192.168.236.101]:37024
warn: Microsoft.AspNetCore.HttpOverrides.ForwardedHeadersMiddleware[1]
      Unknown proxy: [::ffff:192.168.236.101]:37028
warn: Microsoft.AspNetCore.HttpOverrides.ForwardedHeadersMiddleware[1]
      Unknown proxy: [::ffff:192.168.236.101]:53148
warn: Microsoft.AspNetCore.HttpOverrides.ForwardedHeadersMiddleware[1]
      Unknown proxy: [::ffff:192.168.236.101]:53164
warn: Microsoft.AspNetCore.HttpOverrides.ForwardedHeadersMiddleware[1]
      Unknown proxy: [::ffff:192.168.236.101]:53170
warn: Microsoft.AspNetCore.HttpOverrides.ForwardedHeadersMiddleware[1]
      Unknown proxy: [::ffff:192.168.236.101]:53186
warn: Microsoft.AspNetCore.HttpOverrides.ForwardedHeadersMiddleware[1]
      Unknown proxy: [::ffff:192.168.236.101]:40088
warn: Microsoft.AspNetCore.HttpOverrides.ForwardedHeadersMiddleware[1]
      Unknown proxy: [::ffff:192.168.236.101]:40096
warn: Microsoft.AspNetCore.HttpOverrides.ForwardedHeadersMiddleware[1]
      Unknown proxy: [::ffff:192.168.236.101]:55298
warn: Microsoft.AspNetCore.HttpOverrides.ForwardedHeadersMiddleware[1]
      Unknown proxy: [::ffff:192.168.236.101]:55306
warn: Microsoft.AspNetCore.HttpOverrides.ForwardedHeadersMiddleware[1]
      Unknown proxy: [::ffff:192.168.236.101]:45126
warn: Microsoft.AspNetCore.HttpOverrides.ForwardedHeadersMiddleware[1]
      Unknown proxy: [::ffff:192.168.236.101]:52248
warn: Microsoft.AspNetCore.HttpOverrides.ForwardedHeadersMiddleware[1]
      Unknown proxy: [::ffff:192.168.236.101]:36980
warn: Microsoft.AspNetCore.HttpOverrides.ForwardedHeadersMiddleware[1]
      Unknown proxy: [::ffff:192.168.236.101]:36984
warn: Microsoft.AspNetCore.HttpOverrides.ForwardedHeadersMiddleware[1]
      Unknown proxy: [::ffff:192.168.236.101]:36996
warn: Microsoft.AspNetCore.HttpOverrides.ForwardedHeadersMiddleware[1]
      Unknown proxy: [::ffff:192.168.236.101]:58830
warn: Microsoft.AspNetCore.HttpOverrides.ForwardedHeadersMiddleware[1]
      Unknown proxy: [::ffff:192.168.236.101]:54752
warn: Microsoft.AspNetCore.HttpOverrides.ForwardedHeadersMiddleware[1]
      Unknown proxy: [::ffff:192.168.236.101]:34018
warn: Microsoft.AspNetCore.HttpOverrides.ForwardedHeadersMiddleware[1]
      Unknown proxy: [::ffff:192.168.236.101]:43378
warn: Microsoft.AspNetCore.HttpOverrides.ForwardedHeadersMiddleware[1]
      Unknown proxy: [::ffff:192.168.236.101]:43730
warn: Microsoft.AspNetCore.HttpOverrides.ForwardedHeadersMiddleware[1]
      Unknown proxy: [::ffff:192.168.236.101]:43736
warn: Microsoft.AspNetCore.HttpOverrides.ForwardedHeadersMiddleware[1]
      Unknown proxy: [::ffff:192.168.236.101]:43740
warn: Microsoft.AspNetCore.HttpOverrides.ForwardedHeadersMiddleware[1]
      Unknown proxy: [::ffff:192.168.236.101]:50066
warn: Microsoft.AspNetCore.HttpOverrides.ForwardedHeadersMiddleware[1]
      Unknown proxy: [::ffff:192.168.236.101]:50082
warn: Microsoft.AspNetCore.HttpOverrides.ForwardedHeadersMiddleware[1]
      Unknown proxy: [::ffff:192.168.236.101]:50098
warn: Microsoft.AspNetCore.HttpOverrides.ForwardedHeadersMiddleware[1]
      Unknown proxy: [::ffff:192.168.236.101]:51534
warn: Microsoft.AspNetCore.HttpOverrides.ForwardedHeadersMiddleware[1]
      Unknown proxy: [::ffff:192.168.236.101]:51548
warn: Microsoft.AspNetCore.HttpOverrides.ForwardedHeadersMiddleware[1]
      Unknown proxy: [::ffff:192.168.236.101]:49864
warn: Microsoft.AspNetCore.HttpOverrides.ForwardedHeadersMiddleware[1]
      Unknown proxy: [::ffff:192.168.236.101]:56630
warn: Microsoft.AspNetCore.HttpOverrides.ForwardedHeadersMiddleware[1]
      Unknown proxy: [::ffff:192.168.236.101]:56638
warn: Microsoft.AspNetCore.HttpOverrides.ForwardedHeadersMiddleware[1]
      Unknown proxy: [::ffff:192.168.236.101]:53012
warn: Microsoft.AspNetCore.HttpOverrides.ForwardedHeadersMiddleware[1]
      Unknown proxy: [::ffff:192.168.236.101]:60234
warn: Microsoft.AspNetCore.HttpOverrides.ForwardedHeadersMiddleware[1]
      Unknown proxy: [::ffff:192.168.236.101]:60250
warn: Microsoft.AspNetCore.HttpOverrides.ForwardedHeadersMiddleware[1]
      Unknown proxy: [::ffff:192.168.236.101]:39996
warn: Microsoft.AspNetCore.HttpOverrides.ForwardedHeadersMiddleware[1]
      Unknown proxy: [::ffff:192.168.236.101]:40000
warn: Microsoft.AspNetCore.HttpOverrides.ForwardedHeadersMiddleware[1]
      Unknown proxy: [::ffff:192.168.236.101]:42610
warn: Microsoft.AspNetCore.HttpOverrides.ForwardedHeadersMiddleware[1]
      Unknown proxy: [::ffff:192.168.236.101]:42594

192.168.236.101 is my reverse proxy

[audricd]

As suggested on discord https://discord.com/channels/796015620436787241/1278322434008678440/1435357761335590994

I tried with android 3.3.8

Unfortunately same result

[audricd]

... thanks to fan and self support: solved. beta testing is sure fun and painless!
https://discord.com/channels/796015620436787241/1278322434008678440/1435351895928733866

and the messages below that.

solution:

1. git clone https://github.com/streetwriters/notesnook.git
2. cd notesnook
3. replace https://github.com/streetwriters/notesnook/blob/master/apps/mobile/native/android/app/src/main/res/xml/network_security_config.xml with the modified one
4. npm install -> will fail many times. satisfy errors one by one, and before rerunning, delete entire repo plus .gradel directory (for its cache)
5. npm build -> will also fail many times, and take long
6. ~/android-sdk/build-tools/35.0.0/apksigner sign   --ks ~/notesnook-release.keystore   --ks-key-\ alias notesnook   --out notesnook-arm64-v8a-signed.apk   app-arm64-v8a-release-unsigned.apk
7. ~/android-sdk/build-tools/35.0.0/apksigner verify -v notesnook-arm64-v8a-signed.apk should return:
   Verifies \ Verified using v1 scheme (JAR signing): false \ Verified using v2 scheme (APK Signature Scheme v2): true \ Verified using v3 scheme (APK Signature Scheme v3): true \ Verified using v3.1 scheme (APK Signature Scheme v3.1): false \ Verified using v4 scheme (APK Signature Scheme v4): false \ Verified for SourceStamp: false \ Number of signers: 1
8. transfer signed apk to phone, make sure you have:

• the option to install from any source
• the root_ca certificate for the domain installed at least in the user cert store

modified network_security_config.xml:

<?xml version="1.0" encoding="utf-8"?>
<network-security-config>
    <!-- Allow app to trust user-installed certificates -->
    <base-config cleartextTrafficPermitted="false">
        <trust-anchors>
            <!-- Trust system CA store -->
            <certificates src="system" />
            <!-- Allow user-installed CA store -->
            <certificates src="user" />
        </trust-anchors>
    </base-config>
    <!-- Allow your domain + all subdomains -->
    <domain-config cleartextTrafficPermitted="false">
        <domain includeSubdomains="true">your.root.domain</domain>
        <trust-anchors>
            <certificates src="system"/>
            <certificates src="user"/>
        </trust-anchors>
    </domain-config>
</network-security-config>

tested with 3.3.8

not closing issue if anyone needs help and or can contribute. devs dont give a shit anyways.