Troubleshooting¶

Start with docker compose logs --tail=100 reddont, or the terminal output when running Bun directly. Note the deployment method, image version, and which page or request fails. Remove credentials from logs before sharing them.

On HTTP, set REDDONT_DISABLE_SSL=true and recreate the container.
On HTTPS, keep secure cookies enabled and verify the public scheme and proxy headers.
Set a persistent JWT_SECRET_KEY if sessions disappear after restarts.
Clear stale site cookies after changing the public address or authentication setup.

For Invalid CSRF token, reload the form so its token and cookie match, then submit again. See HTTPS setup.

Registration needs an invite¶

This is expected once an account exists. Ask an administrator to create an invite from the dashboard. An invalid or already-claimed invite cannot be reused. See accounts and invites.

If an established instance suddenly offers first-user registration, check that it has the correct database mount before creating anything.

OIDC does not start or returns an error¶

Check the required OIDC variables, provider discovery URL, client secret, and exact callback URL. The logs report initialization failures. Confirm that the provider sends the configured group claims and that the user matches OIDC_ALLOWED_GROUPS when configured.

For missing state or session cookies, check HTTPS, the external hostname, and forwarded scheme. Try /login?bypass_oidc=true with a known local password account. See SSO.

Set REMOTE_HEADER_LOGIN=true. Confirm that the proxy supplies Remote-User and that its direct IP is listed in REVERSE_PROXY_WHITELIST. Use individual IPs, not CIDRs. Requests from an untrusted address are intentionally ignored.

The API returns 403 or 401¶

A 403 happens before key validation: inspect API_WHITELIST and the source IP logged by the app. Docker and proxies can change that address. A working browser session does not grant API network access.

A 401 means the address gate passed but the key is missing or invalid. Check /api/v1/health first, then /api/v1/whoami with X-API-Key. If a key was regenerated, update every client using it.

See API and feeds.

Empty feeds, upstream errors, or rate limits¶

Check whether the same community or post is available on Reddit. Review the upstream request logs. If you saved a Reddit credential, it may have expired; replace it or clear it from the dashboard and retry.

When a failed feed has no authentication available, use Add Reddit authentication on the landing page to open the dashboard's Reddit settings. Save a cookie or bearer token from a signed-in burner account. A user can also share their cookie with other users on the instance who have no credential; see preferences and credentials.

The app's browser limit defaults to 100 requests per 15 minutes; the API defaults to 600. These are separate from upstream rate limits. Slower polling can help. A higher local limit does not remove an upstream restriction.

Data is missing or the database cannot be opened¶

Check the host volume path, REDDONT_DATA_DIR, and permissions for PUID and PGID. Outside Docker, also check the account running Bun and its home directory. The app chooses a data path at startup; an empty path produces a new database instead of finding data elsewhere.

Restore a backup only after stopping the app. See backups and updates.

Video or thumbnails will not load¶

Try reopening the post and checking the same content upstream. Test a current browser with its normal media permissions, and inspect any browser content blocking. Turning off high-resolution thumbnails reduces preview bandwidth. Some media is fetched directly by the browser, so its network access matters as well as the server's.

An installed app shows old pages¶

Reload, close and reopen it, or clear that instance's site data to reset its service worker and cached resources. Clearing site data signs you out. See install as an app.