no access to html panel

[alireza787b]

Sorry for posting this basic question. This is my first experience with Docker
I have not connected any domain to my server and accessed it via IP address.
What should I type instead of example.com in the docker file while installing? I inserted the IP Address but it's not working and no web page is being shown to me.

[dec0dOS]

Hello, @alireza787b.

Please follow the guide in the README on how to disable HTTPS.

To disable HTTPS, please remove https-proxy from docker-compose.yml, set ZU_SECURE_HEADERS to false and change zero-ui port expose to ports.

[alireza787b]

Thanks for the reply
I followed the documentation and disabled the HTTPS... still no access to the page. what exact URL sould I navigate to ?
http://IP_ADRESS:4000 ? or /app?

This is my docker file before installation

 dockerfile: ./docker/zero-ui/Dockerfile
    restart: unless-stopped
    depends_on:
      - zerotier
    volumes:
      - controller_data:/var/lib/zerotier-one
      - zero-ui_data:/app/backend/data
    environment:
      - ZU_CONTROLLER_ENDPOINT=http://zerotier:9993/
      - ZU_SECURE_HEADERS=false
      - ZU_DEFAULT_USERNAME=admin
      - ZU_DEFAULT_PASSWORD=zero-ui
    ports:
      - "4000"

volumes:
  zero-ui_data:
  controller_data:
  caddy_data:

[dec0dOS]

Something like this should work for you (docker-compose.yml):

version: "3.9"

services:
  zerotier:
    image: dec0dos/zerotier-controller:latest
    container_name: zu-controller
    build:
      context: .
      dockerfile: ./docker/zerotier/Dockerfile
    restart: unless-stopped
    volumes:
      - controller_data:/var/lib/zerotier-one
    expose:
      - "9993/tcp"
    ports:
      - "9993:9993/udp"
  zero-ui:
    image: dec0dos/zero-ui:latest
    container_name: zu-main
    build:
      context: .
      dockerfile: ./docker/zero-ui/Dockerfile
    restart: unless-stopped
    depends_on:
      - zerotier
    volumes:
      - controller_data:/var/lib/zerotier-one
      - zero-ui_data:/app/backend/data
    environment:
      - ZU_CONTROLLER_ENDPOINT=http://zerotier:9993/
      - ZU_SECURE_HEADERS=false
      - ZU_DEFAULT_USERNAME=admin
      - ZU_DEFAULT_PASSWORD=zero-ui
    ports:
      - "4000"

volumes:
  zero-ui_data:
  controller_data:

Navigate to http://YOURIP:4000/app

[dsm150]

I have edited the settings file as you suggested.
The page does not open on port 4000 either.
But!
I entered the command - docker-compose ps

user@debian-template:~# docker-compose ps
    Name                   Command               State                         Ports                       
-----------------------------------------------------------------------------------------------------------
zu-controller   zerotier-one                     Up      9993/tcp, 0.0.0.0:9993->9993/udp,:::9993->9993/udp
zu-main         docker-entrypoint.sh node  ...   Up      0.0.0.0:49153->4000/tcp,:::49153->4000/tcp   

And I tried to enter on port 49153, and yes, the page opened...

[alireza787b]

Thanks for the reply sir

I used the exact docker composer that you sent.
while check for the log I get the following error:

root@srv157349:~# docker-compose logs -f
Attaching to zu-main, zu-controller
zu-main | node:internal/process/promises:246
zu-main | triggerUncaughtException(err, true /* fromPromise */);
zu-main | ^
zu-main |
zu-main | <ref *1> Error: connect ECONNREFUSED 172.18.0.2:9993
zu-main | at TCPConnectWrap.afterConnect [as oncomplete] (node:net:1146:16) {
zu-main | errno: -111,
zu-main | code: 'ECONNREFUSED',
zu-main | syscall: 'connect',
zu-main | address: '172.18.0.2',
zu-main | port: 9993,
zu-main | config: {
zu-main | url: 'status',
zu-main | method: 'get',
zu-main | headers: {
zu-main | Accept: 'application/json, text/plain, /',
zu-main | 'X-ZT1-Auth': 'izly17q4n7wkmvf8xnha7es7',
zu-main | 'User-Agent': 'axios/0.21.1'
zu-main | },
zu-main | baseURL: 'http://zerotier:9993/',
zu-main | transformRequest: [ [Function: transformRequest] ],
zu-main | transformResponse: [ [Function: transformResponse] ],
zu-main | timeout: 0,
zu-main | adapter: [Function: httpAdapter],
zu-main | responseType: 'json',
zu-main | xsrfCookieName: 'XSRF-TOKEN',
zu-main | xsrfHeaderName: 'X-XSRF-TOKEN',
zu-main | maxContentLength: -1,
zu-main | maxBodyLength: -1,
zu-main | validateStatus: [Function: validateStatus],
zu-main | data: undefined
zu-main | },
zu-main | request: <ref *3> Writable {
zu-main | _writableState: WritableState {
zu-main | objectMode: false,
zu-main | highWaterMark: 16384,
zu-main | finalCalled: false,
zu-main | needDrain: false,
zu-main | ending: false,
zu-main | ended: false,
zu-main | finished: false,
zu-main | destroyed: false,
zu-main | decodeStrings: true,
zu-main | defaultEncoding: 'utf8',
zu-main | length: 0,
zu-main | writing: false,
zu-main | corked: 0,
zu-main | sync: true,
zu-main | bufferProcessing: false,
zu-main | onwrite: [Function: bound onwrite],
zu-main | writecb: null,
zu-main | writelen: 0,
zu-main | afterWriteTickInfo: null,
zu-main | buffered: [],
zu-main | bufferedIndex: 0,
zu-main | allBuffers: true,
zu-main | allNoop: true,
zu-main | pendingcb: 0,
zu-main | constructed: true,
zu-main | prefinished: false,
zu-main | errorEmitted: false,
zu-main | emitClose: true,
zu-main | autoDestroy: true,
zu-main | errored: null,
zu-main | closed: false,
zu-main | closeEmitted: false,
zu-main | [Symbol(kOnFinished)]: []
zu-main | },
zu-main | _events: [Object: null prototype] {
zu-main | response: [Function: handleResponse],
zu-main | error: [Function: handleRequestError]
zu-main | },
zu-main | _eventsCount: 2,
zu-main | _maxListeners: undefined,
zu-main | _options: {
zu-main | maxRedirects: 21,
zu-main | maxBodyLength: 10485760,
zu-main | protocol: 'http:',
zu-main | path: '/status',
zu-main | method: 'GET',
zu-main | headers: {
zu-main | Accept: 'application/json, text/plain, /',
zu-main | 'X-ZT1-Auth': 'izly17q4n7wkmvf8xnha7es7',
zu-main | 'User-Agent': 'axios/0.21.1'
zu-main | },
zu-main | agent: undefined,
zu-main | agents: { http: undefined, https: undefined },
zu-main | auth: undefined,
zu-main | hostname: 'zerotier',
zu-main | port: '9993',
zu-main | nativeProtocols: {
zu-main | 'http:': {
zu-main | _connectionListener: [Function: connectionListener],
zu-main | METHODS: [
zu-main | 'ACL', 'BIND', 'CHECKOUT',
zu-main | 'CONNECT', 'COPY', 'DELETE',
zu-main | 'GET', 'HEAD', 'LINK',
zu-main | 'LOCK', 'M-SEARCH', 'MERGE',
zu-main | 'MKACTIVITY', 'MKCALENDAR', 'MKCOL',
zu-main | 'MOVE', 'NOTIFY', 'OPTIONS',
zu-main | 'PATCH', 'POST', 'PROPFIND',
zu-main | 'PROPPATCH', 'PURGE', 'PUT',
zu-main | 'REBIND', 'REPORT', 'SEARCH',
zu-main | 'SOURCE', 'SUBSCRIBE', 'TRACE',
zu-main | 'UNBIND', 'UNLINK', 'UNLOCK',
zu-main | 'UNSUBSCRIBE'
zu-main | ],
zu-main | STATUS_CODES: {
zu-main | '100': 'Continue',
zu-main | '101': 'Switching Protocols',
zu-main | '102': 'Processing',
zu-main | '103': 'Early Hints',
zu-main | '200': 'OK',
zu-main | '201': 'Created',
zu-main | '202': 'Accepted',
zu-main | '203': 'Non-Authoritative Information',
zu-main | '204': 'No Content',
zu-main | '205': 'Reset Content',
zu-main | '206': 'Partial Content',
zu-main | '207': 'Multi-Status',
zu-main | '208': 'Already Reported',
zu-main | '226': 'IM Used',
zu-main | '300': 'Multiple Choices',
zu-main | '301': 'Moved Permanently',
zu-main | '302': 'Found',
zu-main | '303': 'See Other',
zu-main | '304': 'Not Modified',
zu-main | '305': 'Use Proxy',
zu-main | '307': 'Temporary Redirect',
zu-main | '308': 'Permanent Redirect',
zu-main | '400': 'Bad Request',
zu-main | '401': 'Unauthorized',
zu-main | '402': 'Payment Required',
zu-main | '403': 'Forbidden',
zu-main | '404': 'Not Found',
zu-main | '405': 'Method Not Allowed',
zu-main | '406': 'Not Acceptable',
zu-main | '407': 'Proxy Authentication Required',
zu-main | '408': 'Request Timeout',
zu-main | '409': 'Conflict',
zu-main | '410': 'Gone',
zu-main | '411': 'Length Required',
zu-main | '412': 'Precondition Failed',
zu-main | '413': 'Payload Too Large',
zu-main | '414': 'URI Too Long',
zu-main | '415': 'Unsupported Media Type',
zu-main | '416': 'Range Not Satisfiable',
zu-main | '417': 'Expectation Failed',
zu-main | '418': "I'm a Teapot",
zu-main | '421': 'Misdirected Request',
zu-main | '422': 'Unprocessable Entity',
zu-main | '423': 'Locked',
zu-main | '424': 'Failed Dependency',
zu-main | '425': 'Too Early',
zu-main | '426': 'Upgrade Required',
zu-main | '428': 'Precondition Required',
zu-main | '429': 'Too Many Requests',
zu-main | '431': 'Request Header Fields Too Large',
zu-main | '451': 'Unavailable For Legal Reasons',
zu-main | '500': 'Internal Server Error',
zu-main | '501': 'Not Implemented',
zu-main | '502': 'Bad Gateway',
zu-main | '503': 'Service Unavailable',
zu-main | '504': 'Gateway Timeout',
zu-main | '505': 'HTTP Version Not Supported',
zu-main | '506': 'Variant Also Negotiates',
zu-main | '507': 'Insufficient Storage',
zu-main | '508': 'Loop Detected',
zu-main | '509': 'Bandwidth Limit Exceeded',
zu-main | '510': 'Not Extended',
zu-main | '511': 'Network Authentication Required'
zu-main | },
zu-main | Agent: [Function: Agent] { defaultMaxSockets: Infinity },
zu-main | ClientRequest: [Function: ClientRequest],
zu-main | IncomingMessage: [Function: IncomingMessage],
zu-main | OutgoingMessage: [Function: OutgoingMessage],
zu-main | Server: [Function: Server],
zu-main | ServerResponse: [Function: ServerResponse],
zu-main | createServer: [Function: createServer],
zu-main | validateHeaderName: [Function: _node_internal],
zu-main | validateHeaderValue: [Function: _node_internal],
zu-main | get: [Function: get],
zu-main | request: [Function: request],
zu-main | maxHeaderSize: [Getter],
zu-main | globalAgent: [Getter/Setter]
zu-main | },
zu-main | 'https:': {
zu-main | Agent: [Function: Agent],
zu-main | globalAgent: Agent {
zu-main | _events: [Object: null prototype],
zu-main | _eventsCount: 2,
zu-main | _maxListeners: undefined,
zu-main | defaultPort: 443,
zu-main | protocol: 'https:',
zu-main | options: [Object: null prototype],
zu-main | requests: [Object: null prototype] {},
zu-main | sockets: [Object: null prototype] {},
zu-main | freeSockets: [Object: null prototype] {},
zu-main | keepAliveMsecs: 1000,
zu-main | keepAlive: false,
zu-main | maxSockets: Infinity,
zu-main | maxFreeSockets: 256,
zu-main | scheduling: 'lifo',
zu-main | maxTotalSockets: Infinity,
zu-main | totalSocketCount: 0,
zu-main | maxCachedSessions: 100,
zu-main | _sessionCache: [Object],
zu-main | [Symbol(kCapture)]: false
zu-main | },
zu-main | Server: [Function: Server],
zu-main | createServer: [Function: createServer],
zu-main | get: [Function: get],
zu-main | request: [Function: request]
zu-main | }
zu-main | },
zu-main | pathname: '/status'
zu-main | },
zu-main | _ended: true,
zu-main | _ending: true,
zu-main | _redirectCount: 0,
zu-main | _redirects: [],
zu-main | _requestBodyLength: 0,
zu-main | _requestBodyBuffers: [],
zu-main | _onNativeResponse: [Function (anonymous)],
zu-main | _currentRequest: <ref *2> ClientRequest {
zu-main | _events: [Object: null prototype] {
zu-main | response: [Function: bound onceWrapper] {
zu-main | listener: [Function (anonymous)]
zu-main | },
zu-main | abort: [Function (anonymous)],
zu-main | aborted: [Function (anonymous)],
zu-main | connect: [Function (anonymous)],
zu-main | error: [Function (anonymous)],
zu-main | socket: [Function (anonymous)],
zu-main | timeout: [Function (anonymous)]
zu-main | },
zu-main | _eventsCount: 7,
zu-main | _maxListeners: undefined,
zu-main | outputData: [],
zu-main | outputSize: 0,
zu-main | writable: true,
zu-main | destroyed: false,
zu-main | _last: true,
zu-main | chunkedEncoding: false,
zu-main | shouldKeepAlive: false,
zu-main | _defaultKeepAlive: true,
zu-main | useChunkedEncodingByDefault: false,
zu-main | sendDate: false,
zu-main | _removedConnection: false,
zu-main | _removedContLen: false,
zu-main | _removedTE: false,
zu-main | _contentLength: 0,
zu-main | _hasBody: true,
zu-main | _trailer: '',
zu-main | finished: true,
zu-main | _headerSent: true,
zu-main | _closed: false,
zu-main | socket: Socket {
zu-main | connecting: false,
zu-main | _hadError: true,
zu-main | _parent: null,
zu-main | _host: 'zerotier',
zu-main | _readableState: ReadableState {
zu-main | objectMode: false,
zu-main | highWaterMark: 16384,
zu-main | buffer: BufferList { head: null, tail: null, length: 0 },
zu-main | length: 0,
zu-main | pipes: [],
zu-main | flowing: true,
zu-main | ended: false,
zu-main | endEmitted: false,
zu-main | reading: true,
zu-main | constructed: true,
zu-main | sync: false,
zu-main | needReadable: true,
zu-main | emittedReadable: false,
zu-main | readableListening: false,
zu-main | resumeScheduled: false,
zu-main | errorEmitted: true,
zu-main | emitClose: false,
zu-main | autoDestroy: true,
zu-main | destroyed: true,
zu-main | errored: [Circular *1],
zu-main | closed: true,
zu-main | closeEmitted: true,
zu-main | defaultEncoding: 'utf8',
zu-main | awaitDrainWriters: null,
zu-main | multiAwaitDrain: false,
zu-main | readingMore: false,
zu-main | dataEmitted: false,
zu-main | decoder: null,
zu-main | encoding: null,
zu-main | [Symbol(kPaused)]: false
zu-main | },
zu-main | _events: [Object: null prototype] {
zu-main | end: [Function: onReadableStreamEnd],
zu-main | connect: [ [Function], [Function], [Function] ],
zu-main | free: [Function: onFree],
zu-main | close: [ [Function: onClose], [Function: socketCloseListener] ],
zu-main | timeout: [Function: onTimeout],
zu-main | agentRemove: [Function: onRemove],
zu-main | error: [Function: socketErrorListener],
zu-main | drain: [Function: ondrain]
zu-main | },
zu-main | _eventsCount: 8,
zu-main | _maxListeners: undefined,
zu-main | _writableState: WritableState {
zu-main | objectMode: false,
zu-main | highWaterMark: 16384,
zu-main | finalCalled: false,
zu-main | needDrain: false,
zu-main | ending: false,
zu-main | ended: false,
zu-main | finished: false,
zu-main | destroyed: true,
zu-main | decodeStrings: false,
zu-main | defaultEncoding: 'utf8',
zu-main | length: 171,
zu-main | writing: true,
zu-main | corked: 0,
zu-main | sync: false,
zu-main | bufferProcessing: false,
zu-main | onwrite: [Function: bound onwrite],
zu-main | writecb: [Function: bound onFinish],
zu-main | writelen: 171,
zu-main | afterWriteTickInfo: null,
zu-main | buffered: [],
zu-main | bufferedIndex: 0,
zu-main | allBuffers: true,
zu-main | allNoop: true,
zu-main | pendingcb: 1,
zu-main | constructed: true,
zu-main | prefinished: false,
zu-main | errorEmitted: true,
zu-main | emitClose: false,
zu-main | autoDestroy: true,
zu-main | errored: [Circular *1],
zu-main | closed: true,
zu-main | closeEmitted: true,
zu-main | [Symbol(kOnFinished)]: []
zu-main | },
zu-main | allowHalfOpen: false,
zu-main | _sockname: null,
zu-main | _pendingData: 'GET /status HTTP/1.1\r\n' +
zu-main | 'Accept: application/json, text/plain, /\r\n' +
zu-main | 'X-ZT1-Auth: izly17q4n7wkmvf8xnha7es7\r\n' +
zu-main | 'User-Agent: axios/0.21.1\r\n' +
zu-main | 'Host: zerotier:9993\r\n' +
zu-main | 'Connection: close\r\n' +
zu-main | '\r\n',
zu-main | _pendingEncoding: 'latin1',
zu-main | server: null,
zu-main | _server: null,
zu-main | parser: null,
zu-main | _httpMessage: [Circular *2],
zu-main | [Symbol(async_id_symbol)]: 8,
zu-main | [Symbol(kHandle)]: null,
zu-main | [Symbol(kSetNoDelay)]: false,
zu-main | [Symbol(lastWriteQueueSize)]: 0,
zu-main | [Symbol(timeout)]: null,
zu-main | [Symbol(kBuffer)]: null,
zu-main | [Symbol(kBufferCb)]: null,
zu-main | [Symbol(kBufferGen)]: null,
zu-main | [Symbol(kCapture)]: false,
zu-main | [Symbol(kBytesRead)]: 0,
zu-main | [Symbol(kBytesWritten)]: 0
zu-main | },
zu-main | _header: 'GET /status HTTP/1.1\r\n' +
zu-main | 'Accept: application/json, text/plain, /\r\n' +
zu-main | 'X-ZT1-Auth: izly17q4n7wkmvf8xnha7es7\r\n' +
zu-main | 'User-Agent: axios/0.21.1\r\n' +
zu-main | 'Host: zerotier:9993\r\n' +
zu-main | 'Connection: close\r\n' +
zu-main | '\r\n',
zu-main | _keepAliveTimeout: 0,
zu-main | _onPendingData: [Function: nop],
zu-main | agent: Agent {
zu-main | _events: [Object: null prototype] {
zu-main | free: [Function (anonymous)],
zu-main | newListener: [Function: maybeEnableKeylog]
zu-main | },
zu-main | _eventsCount: 2,
zu-main | _maxListeners: undefined,
zu-main | defaultPort: 80,
zu-main | protocol: 'http:',
zu-main | options: [Object: null prototype] { path: null },
zu-main | requests: [Object: null prototype] {},
zu-main | sockets: [Object: null prototype] {
zu-main | 'zerotier:9993:': [ [Socket], [Socket] ]
zu-main | },
zu-main | freeSockets: [Object: null prototype] {},
zu-main | keepAliveMsecs: 1000,
zu-main | keepAlive: false,
zu-main | maxSockets: Infinity,
zu-main | maxFreeSockets: 256,
zu-main | scheduling: 'lifo',
zu-main | maxTotalSockets: Infinity,
zu-main | totalSocketCount: 2,
zu-main | [Symbol(kCapture)]: false
zu-main | },
zu-main | socketPath: undefined,
zu-main | method: 'GET',
zu-main | maxHeaderSize: undefined,
zu-main | insecureHTTPParser: undefined,
zu-main | path: '/status',
zu-main | _ended: false,
zu-main | res: null,
zu-main | aborted: false,
zu-main | timeoutCb: null,
zu-main | upgradeOrConnect: false,
zu-main | parser: null,
zu-main | maxHeadersCount: null,
zu-main | reusedSocket: false,
zu-main | host: 'zerotier',
zu-main | protocol: 'http:',
zu-main | _redirectable: [Circular *3],
zu-main | [Symbol(kCapture)]: false,
zu-main | [Symbol(kNeedDrain)]: false,
zu-main | [Symbol(corked)]: 0,
zu-main | [Symbol(kOutHeaders)]: [Object: null prototype] {
zu-main | accept: [ 'Accept', 'application/json, text/plain, /' ],
zu-main | 'x-zt1-auth': [ 'X-ZT1-Auth', 'izly17q4n7wkmvf8xnha7es7' ],
zu-main | 'user-agent': [ 'User-Agent', 'axios/0.21.1' ],
zu-main | host: [ 'Host', 'zerotier:9993' ]
zu-main | }
zu-main | },
zu-main | _currentUrl: 'http://zerotier:9993/status',
zu-main | [Symbol(kCapture)]: false
zu-main | },
zu-main | response: undefined,
zu-main | isAxiosError: true,
zu-main | toJSON: [Function: toJSON]
zu-main | }

and no response on HTML page as well.

[dec0dOS]

Something is wrong with zerotier controller. Restart the app and try to catch the first line, where the zerotier is initialized.

[alireza787b]

I did "docker-compose restart" and also rebooted the server and run the composer again.. it shows running and no error.... but when get the log still has the same problem.
I followed the steps in your readme (with your modified docker composer file pulling)

[dec0dOS]

docker logs zu-controller should help.

[alireza787b]

it returns nothing... Is zero tier controller installed automatically with the docker package?
Can you provide us with a manual for installing zero-ui independent of the docker system?

[dec0dOS]

That is strange. It seems that the zerotier controller crashes without any logs. Try to install the controller on the host system and use the current manual on how to use the existing controller outside of docker.

[alireza787b]

Thanks for the help. It was strange... I ended up creating a SSL and connecting a domain :) So it's working now but with domain and SSL.
But I have a problem that seems related to zerotier itself...
I connected two nodes and assigned IP to them. but if any of them be connected to a router, I cannot ping between those and I get :
ping: sendto: Host is down
Request timeout for icmp_seq 177
ping: sendto: Host is down
Request timeout for icmp_seq 178

Is this problem has anything to do with the setting of the zero-ui or router settings? have you experienced this problem? I changed nothing in the default settings

[alireza787b]

Yes, Those are being shown as a relay.
The problem is not with the cellular itself, since the same sim card works when I put it in my iPhone and hotspot the connection for the node.
Seems like a double NAT problem. Can you give me a hint on how to solve this problem? I want to have internet access and zerotier network for the nodes that are connected to my 4G router.
I had enabled the IP bridge option in the network management panel from the beginning. (is that you mean) but nothing changed

[timothyl13241]

Do you have the model number of the 4G router? I might be able to look it up and give some suggestions regarding configuration

[alireza787b]

Yeah
It is Huawei E5577 4G Portable WiFi module.
Thanks for the help sir

[timothyl13241]

Ok so I tried looking up that router and it appears that there are multiple different versions. I was unable to find a detailed user manual, but based on what I found online, you may need to double-check your firewall settings to ensure that all UDP outbound ports are allowed. I believe you can also check on the NAT settings and ensure that UPnP is turned on. If I have understood the information correctly, you can access the router configuration at http://192.168.1.1 while connected to the WiFi hotspot.

Since I was unable to find additional details I am not able to provide more specific things to try, but feel free to let me know if you have questions regarding the settings.

[alireza787b]

Sorry I didn't see your reply
very interesting as soon as I added some firewall rules on my VPS it started working. I just opened the incoming ports in the server. I have no idea what does it have to do with the modem? Now it's working. I will give it a try to make sure that the problem is solved or not.
Again thanks for the help sir

[Yobro7292]

I had the same problem but thanks to you for asking this question now I found the answer to this discussion. 👍🎆🎆🎆