Matomo behind IIS proxy, login fails

Support & Bugs
1

I have successfully installed Matomo on IIS 10 on Windows Server 2012, sitting behind a reverse proxy (IIS 8 on Windows Server 2012 using IIS’s Application Request Routing module).

However I can’t login to Matomo once installed.

The installer has correctly detected it is behind a proxy and has added

proxy_client_headers[] = "HTTP_X_FORWARDED_FOR"

to /config/config.ini.php, however trying to sign in to Matomo I am seeing the following message:

firefox_GItvnGR7UO
firefox_GItvnGR7UO421×520 10.1 KB

The Referer header appears correct - it’s set to the domain used for the site binding on the proxy - and I can also see that the MATOMO_SESSID cookie is set to this domain.

So I’m unsure why logging in is failing.

Has anyone successfully set up Matomo behind an IIS proxy?

2

Hi there,
Yes, many people setup Matomo behind a IIS proxy, it should work fine.
Can you try to add instead proxy_host_headers[] = HTTP_X_FORWARDED_HOST ?

3

Hi Matthieu,

I have replaced proxy_client_headers[] = "HTTP_X_FORWARDED_FOR"
with proxy_host_headers[] = "HTTP_X_FORWARDED_HOST" in my config.ini.php as suggested.

However I am still seeing “Error: Form security failed” on login.

Output from Firefox’s Developer Tools Network tab below:

JuwAJsf3v8
JuwAJsf3v8432×535 16.8 KB

4

Same from the Storage tab, showing the MATOMO_SESSID cookie being stored:

lTmxrb5ICR

5

HI @dhealy can you reach out to us via Contact the Piwik team - Analytics Platform - Matomo
and describe issue and a link to this forum post and we’ll proceed and help troubleshoot, if possible. Thanks

6

Thanks Matthieu, I have sent a message through the contact form as requested.