Currently, I can login to silverbullet, but am immediately greeted with a popup stating "You are not authenticated, reloading to reauthenticate" and reloading the page. This happens again and again. When I first installed silverbullet, it did actually function, but after migrating my old notes over and accidentally changing some https settings in Cloudflare for another project (before changing it back to full encryption), it began to fail again. I'm not sure what do about this and I'm guessing that it is user error on my part, so I decided against opening a Github issue. github issue here
Clearing cookies for the page temporarily fixes the problem and brings me to the auth page, but after logging in (with or without remember me) the issue reappears. On my already-logged-in iPhone, I don't encounter this issue.
A part of me wonders if the authentication flow doesn't show up if you already have an un-expired token in your cookie, even if you have the authentication_reload cookie
I'll attach my docker-compose.yml for both Caddy and Silverbullet, as well as the logs I've been seeing. I've already tried removing the _plug folder as well.
I apologize if this is a lot of content, not really sure what's useful here.
Logs from container:
silverbullet | Will run SilverBullet with UID 0, inferred from the owner of /space (set PUID environment variable to override)
silverbullet | 2026/03/27 04:47:48 Starting SilverBullet version 2.5.2-0-gad45eebb-2026-03-06T12-21-01Z
silverbullet | 2026/03/27 04:47:48 User authentication enabled for user "kai" with lockout limit 10 and lockout time 60s
silverbullet | 2026/03/27 04:47:48 Local shell command execution enabled for ALL commands.
silverbullet | 2026/03/27 04:47:48 SilverBullet is now running: http://0.0.0.0:3000
silverbullet | 2026/03/27 04:49:16 Unauthorized access to /.fs/index.md, redirecting to auth page
silverbullet | 2026/03/27 04:49:19 Unauthorized access to /.fs/Library/Std/APIs/Schema.md, redirecting to auth page
silverbullet | 2026/03/27 04:49:19 Unauthorized access to /.config, redirecting to auth page
silverbullet | 2026/03/27 04:49:19 Unauthorized access to /.fs/Library/Std/Config.md, redirecting to auth page
silverbullet | 2026/03/27 04:49:19 Unauthorized access to /.fs/CONFIG.md, redirecting to auth page
silverbullet | 2026/03/27 04:49:20 Unauthorized access to /.fs/Library/Std/APIs/Tag.md, redirecting to auth page
silverbullet | 2026/03/27 04:51:03 Unauthorized access to /.fs/index.md, redirecting to auth page
silverbullet | 2026/03/27 04:51:31 Authentication failed, redirecting to auth page.
silverbullet | 2026/03/27 05:06:40 Unauthorized access to /robots.txt, redirecting to auth page
silverbullet | 2026/03/27 05:08:04 Unauthorized access to /.config, redirecting to auth page
silverbullet | 2026/03/27 06:09:28 Unauthorized access to /robots.txt, redirecting to auth page
silverbullet | 2026/03/27 07:26:56 Unauthorized access to /robots.txt, redirecting to auth page
silverbullet | 2026/03/27 09:05:35 Unauthorized access to /manifest.json, redirecting to auth page
silverbullet | 2026/03/27 09:05:35 Unauthorized access to /client.js, redirecting to auth page
silverbullet | 2026/03/27 09:05:47 Unauthorized access to /client.js, redirecting to auth page
silverbullet | 2026/03/27 09:05:47 Unauthorized access to /manifest.json, redirecting to auth page
silverbullet | 2026/03/27 09:06:06 Unauthorized access to /client.js, redirecting to auth page
silverbullet | 2026/03/27 09:06:06 Unauthorized access to /manifest.json, redirecting to auth page
silverbullet | 2026/03/27 09:14:52 Unauthorized access to /_next/static/, redirecting to auth page
silverbullet | 2026/03/27 09:27:27 Unauthorized access to /json/, redirecting to auth page
silverbullet | 2026/03/27 09:39:37 Unauthorized access to /robots.txt, redirecting to auth page
silverbullet | 2026/03/27 11:01:20 Unauthorized access to /robots.txt, redirecting to auth page
silverbullet | 2026/03/27 12:17:45 Unauthorized access to /robots.txt, redirecting to auth page
silverbullet | 2026/03/27 13:31:30 Unauthorized access to /_next, redirecting to auth page
silverbullet | 2026/03/27 13:31:30 Unauthorized access to /api, redirecting to auth page
silverbullet | 2026/03/27 13:31:30 Unauthorized access to /_next/server, redirecting to auth page
silverbullet | 2026/03/27 13:31:31 Unauthorized access to /app, redirecting to auth page
silverbullet | 2026/03/27 13:31:31 Unauthorized access to /api/route, redirecting to auth page
silverbullet | 2026/03/27 13:31:34 Unauthorized access to /robots.txt, redirecting to auth page
silverbullet | 2026/03/27 14:11:44 Unauthorized access to /en/, redirecting to auth page
silverbullet | 2026/03/27 14:11:44 Unauthorized access to /app/, redirecting to auth page
silverbullet | 2026/03/27 14:11:44 Unauthorized access to /api/, redirecting to auth page
silverbullet | 2026/03/27 14:11:44 Unauthorized access to /_next/, redirecting to auth page
silverbullet | 2026/03/27 14:11:45 Unauthorized access to /en/, redirecting to auth page
silverbullet | 2026/03/27 14:11:45 Unauthorized access to /app/, redirecting to auth page
silverbullet | 2026/03/27 14:11:45 Unauthorized access to /api/, redirecting to auth page
silverbullet | 2026/03/27 14:11:45 Unauthorized access to /_next/, redirecting to auth page
silverbullet | 2026/03/27 14:11:46 Unauthorized access to /en/, redirecting to auth page
silverbullet | 2026/03/27 14:11:46 Unauthorized access to /app/, redirecting to auth page
silverbullet | 2026/03/27 14:11:46 Unauthorized access to /api/, redirecting to auth page
silverbullet | 2026/03/27 14:11:47 Unauthorized access to /_next/, redirecting to auth page
silverbullet | 2026/03/27 14:11:47 Unauthorized access to /en/, redirecting to auth page
silverbullet | 2026/03/27 14:11:47 Unauthorized access to /app/, redirecting to auth page
silverbullet | 2026/03/27 14:11:47 Unauthorized access to /api/, redirecting to auth page
silverbullet | 2026/03/27 14:11:48 Unauthorized access to /_next/, redirecting to auth page
silverbullet | 2026/03/27 14:11:48 Unauthorized access to /en/, redirecting to auth page
silverbullet | 2026/03/27 14:11:48 Unauthorized access to /app/, redirecting to auth page
silverbullet | 2026/03/27 14:11:49 Unauthorized access to /api/, redirecting to auth page
silverbullet | 2026/03/27 14:11:49 Unauthorized access to /_next/, redirecting to auth page
silverbullet | 2026/03/27 14:11:49 Unauthorized access to /en/, redirecting to auth page
silverbullet | 2026/03/27 14:11:49 Unauthorized access to /app/, redirecting to auth page
silverbullet | 2026/03/27 14:11:50 Unauthorized access to /api/, redirecting to auth page
silverbullet | 2026/03/27 14:11:50 Unauthorized access to /_next/, redirecting to auth page
silverbullet | 2026/03/27 14:11:50 Unauthorized access to /en/, redirecting to auth page
silverbullet | 2026/03/27 14:11:50 Unauthorized access to /app/, redirecting to auth page
silverbullet | 2026/03/27 14:11:51 Unauthorized access to /api/, redirecting to auth page
silverbullet | 2026/03/27 14:11:51 Unauthorized access to /_next/, redirecting to auth page
silverbullet | 2026/03/27 14:11:51 Unauthorized access to /en/, redirecting to auth page
silverbullet | 2026/03/27 14:11:52 Unauthorized access to /app/, redirecting to auth page
silverbullet | 2026/03/27 14:11:52 Unauthorized access to /api/, redirecting to auth page
silverbullet | 2026/03/27 14:11:52 Unauthorized access to /_next/, redirecting to auth page
silverbullet | 2026/03/27 14:47:54 Unauthorized access to *, redirecting to auth page
silverbullet | 2026/03/27 14:48:04 Unauthorized access to /favicon.ico, redirecting to auth page
silverbullet | 2026/03/27 14:49:43 Unauthorized access to /wiki, redirecting to auth page
silverbullet | 2026/03/27 14:49:47 Unauthorized access to /robots.txt, redirecting to auth page
silverbullet | 2026/03/27 16:06:42 Unauthorized access to /robots.txt, redirecting to auth page
silverbullet | 2026/03/27 16:51:29 Unauthorized access to /en/, redirecting to auth page
silverbullet | 2026/03/27 16:51:29 Unauthorized access to /app/, redirecting to auth page
silverbullet | 2026/03/27 16:51:29 Unauthorized access to /api/, redirecting to auth page
silverbullet | 2026/03/27 16:51:30 Unauthorized access to /_next/, redirecting to auth page
silverbullet | 2026/03/27 16:51:30 Unauthorized access to /en/, redirecting to auth page
silverbullet | 2026/03/27 16:51:30 Unauthorized access to /app/, redirecting to auth page
silverbullet | 2026/03/27 16:51:30 Unauthorized access to /api/, redirecting to auth page
silverbullet | 2026/03/27 16:51:31 Unauthorized access to /_next/, redirecting to auth page
silverbullet | 2026/03/27 16:51:31 Unauthorized access to /en/, redirecting to auth page
silverbullet | 2026/03/27 16:51:31 Unauthorized access to /app/, redirecting to auth page
silverbullet | 2026/03/27 16:51:31 Unauthorized access to /api/, redirecting to auth page
silverbullet | 2026/03/27 16:51:32 Unauthorized access to /_next/, redirecting to auth page
silverbullet | 2026/03/27 16:51:32 Unauthorized access to /en/, redirecting to auth page
silverbullet | 2026/03/27 16:51:32 Unauthorized access to /app/, redirecting to auth page
silverbullet | 2026/03/27 16:51:32 Unauthorized access to /api/, redirecting to auth page
silverbullet | 2026/03/27 16:51:33 Unauthorized access to /_next/, redirecting to auth page
silverbullet | 2026/03/27 16:51:33 Unauthorized access to /en/, redirecting to auth page
silverbullet | 2026/03/27 16:51:33 Unauthorized access to /app/, redirecting to auth page
silverbullet | 2026/03/27 16:51:33 Unauthorized access to /api/, redirecting to auth page
silverbullet | 2026/03/27 16:51:33 Unauthorized access to /_next/, redirecting to auth page
silverbullet | 2026/03/27 16:51:34 Unauthorized access to /en/, redirecting to auth page
silverbullet | 2026/03/27 16:51:34 Unauthorized access to /app/, redirecting to auth page
silverbullet | 2026/03/27 16:51:34 Unauthorized access to /api/, redirecting to auth page
silverbullet | 2026/03/27 16:51:34 Unauthorized access to /_next/, redirecting to auth page
silverbullet | 2026/03/27 16:51:35 Unauthorized access to /en/, redirecting to auth page
silverbullet | 2026/03/27 16:51:35 Unauthorized access to /app/, redirecting to auth page
silverbullet | 2026/03/27 16:51:35 Unauthorized access to /api/, redirecting to auth page
silverbullet | 2026/03/27 16:51:35 Unauthorized access to /_next/, redirecting to auth page
silverbullet | 2026/03/27 16:51:36 Unauthorized access to /en/, redirecting to auth page
silverbullet | 2026/03/27 16:51:36 Unauthorized access to /app/, redirecting to auth page
silverbullet | 2026/03/27 16:51:36 Unauthorized access to /api/, redirecting to auth page
silverbullet | 2026/03/27 16:51:36 Unauthorized access to /_next/, redirecting to auth page
(caddy's) docker-compose.yml
~/infra/caddy# cat docker-compose.yml
version: "3.9"
services:
caddy:
build: .
container_name: caddy
restart: unless-stopped
ports:
- "80:80"
- "443:443"
- "443:443/udp" # HTTP/3
# Add L4 ports as needed, example:
# - "25565:25565" # Minecraft
# - "22:22" # SSH passthrough
environment:
- CLOUDFLARE_API_TOKEN=${CLOUDFLARE_API_TOKEN}
volumes:
- ./Caddyfile:/etc/caddy/Caddyfile
- caddy_data:/data
- caddy_config:/config
networks:
- caddy
volumes:
caddy_data:
caddy_config:
networks:
caddy:
external: true
Caddyfile:
~/infra/caddy# cat Caddyfile
{
email [email protected]
}
sb.klem.ca {
tls {
dns cloudflare {env.CLOUDFLARE_API_TOKEN}
}
reverse_proxy silverbullet:3000
}
(silverbullet) docker-compose.yml
~/infra/silverbullet# cat docker-compose.yml
services:
silverbullet:
container_name: silverbullet
image: ghcr.io/silverbulletmd/silverbullet:latest
restart: unless-stopped
environment:
- SB_USER=${SB_USER}
volumes:
- ./space:/space
ports:
- 3000:3000
networks:
- caddy
networks:
caddy:
external: true
Browser console (Microsoft Edge, Mac M3, Latest)
Thank you!!