Infinite reload when deplyong NextJS to dedicated server

[Niklas-Mezynski]

I have a following problem. I am developing an application using NextJS and Clerk. On development the auth flow is working fine. I click sign in, get redirected to /sign-in and so on...
In order to have a staging environment I usually deploy those apps to my dedicated ubuntu server using docker and proxy different subdomains to the correct docker container. (In the further details the domain is further referenced as sub.domain.de which should serve the nextjs app. SSL and DNS records for the subdomain are all set up)

Now when I visit the page everything is working fine. I click sign in, it redirects me to /sign-in# (not the # for some reason) and I end up in an infinite refresh loop. I can manually remove the # from the url and I then see the login form. After login I get back to my homepage and have an endless refresh loop again. Hard reloading the page fixes it.

All the env variables are set up:

CLERK_SECRET_KEY=*****
NEXT_PUBLIC_CLERK_PUBLISHABLE_KEY=pk_***
NEXT_PUBLIC_CLERK_SIGN_IN_URL=/sign-in
NEXT_PUBLIC_CLERK_SIGN_UP_URL=/sign-up
NEXT_PUBLIC_CLERK_AFTER_SIGN_IN_URL=/
NEXT_PUBLIC_CLERK_AFTER_SIGN_UP_URL=/

My nginx config looks something like this:

server {
    listen 443 ssl;
    server_name sub.domain.de www.sub.domain.de;

    ssl_certificate /etc/nginx/ssl/certificate.cer;
    ssl_certificate_key /etc/nginx/ssl/private_key.key;

    location / {
        proxy_pass http://docker-container:3000;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-Host $host;  # Add this line
    }
}

Those are clerk's debug logs:

frontend:start: [clerk debug start: authMiddleware]
frontend:start:   URL debug, {
frontend:start:     "url": "http://localhost:3000/sign-in",
frontend:start:     "method": "GET",
frontend:start:     "headers": "{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7\",\"accept-encoding\":\"gzip, deflate, br\",\"accept-language\":\"en-US,en;q=0.9,de-DE;q=0.8,de;q=0.7\",\"cache-control\":\"max-age=0\",\"connection\":\"close\",\"cookie\":\"__client_uat=0; __clerk_db_jwt=eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9.eyJkZXYiOiJkdmJfMmJ6eWVaY3BLUmJBT3cxcDNrWFRMRkpUcTV0In0.inptTbU8PbCVDgWv4XQoFX37AF9GxtT1G9sO1gCAdgXlaqUEE2fzuw7Q43-waMnwED92wK5abnCYqeYc8Cr_B5MA9KNf4I_0uIwQkIKXtGyjvR7OX5acP4xbEkAzol1Tgb5neaiNju4PuL6CGoMMJ7VYTNp_1xEPFfQHrnxGnFmcRF2hS3iAWJfWnj-CZJnHPhk4mij89DE_Y8F8fHdjuMCJAlrbasdKQjrGPKNVkvuCfVDUAWeqtQNlNibKB_N9JiwTF9qbnSudW_8jyssoHVpMoUowkFlmC9mTMFA_4-vTcoMWpIICTBdXCsm45U6MJZoN7-t7kyKQkerPstuPrA\",\"dnt\":\"1\",\"host\":\"sub.domain.de\",\"referer\":\"https://sub.domain.de/sign-in\",\"sec-ch-ua\":\"\\\"Not A(Brand\\\";v=\\\"99\\\", \\\"Google Chrome\\\";v=\\\"121\\\", \\\"Chromium\\\";v=\\\"121\\\"\",\"sec-ch-ua-mobile\":\"?0\",\"sec-ch-ua-platform\":\"\\\"Windows\\\"\",\"sec-fetch-dest\":\"document\",\"sec-fetch-mode\":\"navigate\",\"sec-fetch-site\":\"same-origin\",\"upgrade-insecure-requests\":\"1\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36\",\"x-forwarded-for\":\"::ffff:172.23.0.10\",\"x-forwarded-host\":\"sub.domain.de\",\"x-forwarded-port\":\"3000\",\"x-forwarded-proto\":\"http\",\"x-real-ip\":\"77.20.99.20\"}",
frontend:start:     "nextUrl": "http://localhost:3000/sign-in",
frontend:start:     "clerkUrl": "http://sub.domain.de/sign-in"
frontend:start:   }
frontend:start:   Options debug, {
frontend:start:     "debug": true,
frontend:start:     "beforeAuth": false,
frontend:start:     "afterAuth": true
frontend:start:   }
frontend:start:   authenticateRequest state is interstitial, {
frontend:start:     "status": "interstitial",
frontend:start:     "reason": "cross-origin-referrer",
frontend:start:     "message": "",
frontend:start:     "frontendApi": "many-opossum-1.clerk.accounts.dev",
frontend:start:     "publishableKey": "pk_test_bWFueS1vcG9zc3VtLTEuY2xlcmsuYWNjb3VudHMuZGV2JA",
frontend:start:     "isSatellite": false,
frontend:start:     "domain": "",
frontend:start:     "proxyUrl": "",
frontend:start:     "signInUrl": "/sign-in",
frontend:start:     "isSignedIn": false,
frontend:start:     "isInterstitial": true,
frontend:start:     "isUnknown": false,
frontend:start:     "token": null
frontend:start:   }
frontend:start: [clerk debug end: authMiddleware] (@clerk/nextjs=4.29.6,next=14.1.0)
frontend:start: [clerk debug start: authMiddleware]
frontend:start:   URL debug, {
frontend:start:     "url": "http://localhost:3000/sign-in",
frontend:start:     "method": "GET",
frontend:start:     "headers": "{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7\",\"accept-encoding\":\"gzip, deflate, br\",\"accept-language\":\"en-US,en;q=0.9,de-DE;q=0.8,de;q=0.7\",\"cache-control\":\"max-age=0\",\"connection\":\"close\",\"cookie\":\"__client_uat=0; __clerk_db_jwt=eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9.eyJkZXYiOiJkdmJfMmJ6eWVaY3BLUmJBT3cxcDNrWFRMRkpUcTV0In0.inptTbU8PbCVDgWv4XQoFX37AF9GxtT1G9sO1gCAdgXlaqUEE2fzuw7Q43-waMnwED92wK5abnCYqeYc8Cr_B5MA9KNf4I_0uIwQkIKXtGyjvR7OX5acP4xbEkAzol1Tgb5neaiNju4PuL6CGoMMJ7VYTNp_1xEPFfQHrnxGnFmcRF2hS3iAWJfWnj-CZJnHPhk4mij89DE_Y8F8fHdjuMCJAlrbasdKQjrGPKNVkvuCfVDUAWeqtQNlNibKB_N9JiwTF9qbnSudW_8jyssoHVpMoUowkFlmC9mTMFA_4-vTcoMWpIICTBdXCsm45U6MJZoN7-t7kyKQkerPstuPrA\",\"dnt\":\"1\",\"host\":\"sub.domain.de\",\"referer\":\"https://sub.domain.de/sign-in\",\"sec-ch-ua\":\"\\\"Not A(Brand\\\";v=\\\"99\\\", \\\"Google Chrome\\\";v=\\\"121\\\", \\\"Chromium\\\";v=\\\"121\\\"\",\"sec-ch-ua-mobile\":\"?0\",\"sec-ch-ua-platform\":\"\\\"Windows\\\"\",\"sec-fetch-dest\":\"document\",\"sec-fetch-mode\":\"navigate\",\"sec-fetch-site\":\"same-origin\",\"upgrade-insecure-requests\":\"1\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36\",\"x-forwarded-for\":\"::ffff:172.23.0.10\",\"x-forwarded-host\":\"sub.domain.de\",\"x-forwarded-port\":\"3000\",\"x-forwarded-proto\":\"http\",\"x-real-ip\":\"77.20.99.20\"}",
frontend:start:     "nextUrl": "http://localhost:3000/sign-in",
frontend:start:     "clerkUrl": "http://sub.domain.de/sign-in"
frontend:start:   }
frontend:start:   Options debug, {
frontend:start:     "debug": true,
frontend:start:     "beforeAuth": false,
frontend:start:     "afterAuth": true
frontend:start:   }
frontend:start:   authenticateRequest state is interstitial, {
frontend:start:     "status": "interstitial",
frontend:start:     "reason": "cross-origin-referrer",
frontend:start:     "message": "",
frontend:start:     "frontendApi": "many-opossum-1.clerk.accounts.dev",
frontend:start:     "publishableKey": "pk_test_bWFueS1vcG9zc3VtLTEuY2xlcmsuYWNjb3VudHMuZGV2JA",
frontend:start:     "isSatellite": false,
frontend:start:     "domain": "",
frontend:start:     "proxyUrl": "",
frontend:start:     "signInUrl": "/sign-in",
frontend:start:     "isSignedIn": false,
frontend:start:     "isInterstitial": true,
frontend:start:     "isUnknown": false,
frontend:start:     "token": null
frontend:start:   }
frontend:start: [clerk debug end: authMiddleware] (@clerk/nextjs=4.29.6,next=14.1.0

For some reason the nextUrl and url are referring to localhost while the clerkUrl refers to my domain. Is this maybe causing the issue? How can I avoid this?

I am not sure if this is a configuration issue or an issue within the package. Maybe someone has experience with it and can help me out here.
I also studied this issue but it could not resolve my problem.
Any help is appreciated

[kowais915]

Any updates on this?

[Niklas-Mezynski]

Unfortunately not, actually switched to lucia-auth and implemented the auth flow myself

[kowais915]

I just upgraded to the latest version of Next (Next 14) and used Clerk's latest package and It got fixed.

[jescalan]

https://github.com/orgs/clerk/discussions/3829