"Invalid Host header" Error

Question

I have deployed my server on ubunto-20x, tested it with IP address and was working fine.
Then i added the domain name (from namecheap), added ns1, ns2, ns3.digitalocean.com to namecheap NameSpaces, and setup-ed the @ and www referring to the droplet in my domain
setup-ed ufw to allow only http and https access
Then setup-ed SSL certificate using Let’s Encrypt and Certbot.

Now i am getting “Invalid Host header” on result when i use https://www.mydomain.co, Although it is working when i use https://xxx.xxx.x.x (my droplet IP)

what could be wrong ?

Answer 1

bobbyiliev September 1, 2020

Hi there @ahmedmohsenafifi,

This could be due to a host check on your application level. What is the framework that you are using?

You might have to add your new domain name to the allowed hosts or disable the host check from your application, but this would depend on the framework.

Regards,
Bobby

Reply Report

hashiwarsame21 October 17, 2020

Hi. I’m getting the same error as well. Please let me know how and if it was resolved. From what I’ve been reading it seems to be from webpack when using create-react-app.
Reply Report
- bobbyiliev October 18, 2020
  
  Hi there @hashiwarsame21,
  
  What I could suggest is adding the following to your .env file:
  
  DANGEROUSLY_DISABLE_HOST_CHECK=true
  
  Let me know how it goes!
  Regards,
  Bobby
  
  Reply Report
  
  hashiwarsame21 October 18, 2020
  
  Thanks bobby
  
  it worked very well!. There was another solution that involved changing the devServer however this solution above is much simpler. Are there any security concerns with disabling host checks ?
  
  Reply Report
  
  bobbyiliev October 19, 2020
  
  Hi there @hashiwarsame21,
  
  Indeed I believe that you are right, it is going to be more secure to specify your domain as a public property of devServer as specified in that answer:
  
  devServer: { compress: true, public: 'dev.example.com' }
  
  Regards,
  Bobby
  
  Reply Report

Answer 2

hashiwarsame21 October 17, 2020

Hi. I’m getting the same error as well. Please let me know how and if it was resolved. From what I’ve been reading it seems to be from webpack when using create-react-app.
Reply Report
- bobbyiliev October 18, 2020
  
  Hi there @hashiwarsame21,
  
  What I could suggest is adding the following to your .env file:
  
  DANGEROUSLY_DISABLE_HOST_CHECK=true
  
  Let me know how it goes!
  Regards,
  Bobby
  
  Reply Report
  
  hashiwarsame21 October 18, 2020
  
  Thanks bobby
  
  it worked very well!. There was another solution that involved changing the devServer however this solution above is much simpler. Are there any security concerns with disabling host checks ?
  
  Reply Report
  
  bobbyiliev October 19, 2020
  
  Hi there @hashiwarsame21,
  
  Indeed I believe that you are right, it is going to be more secure to specify your domain as a public property of devServer as specified in that answer:
  
  devServer: { compress: true, public: 'dev.example.com' }
  
  Regards,
  Bobby
  
  Reply Report

Related

Question

"Invalid Host header" Error

Related

Leave a comment

Looking for something else?

Sign up for our newsletter

Related

Question

"Invalid Host header" Error

Related

Leave a comment

Related

question

Is possible to connect a DO K8s cluster with a DO Droplet private network?

question

Subdomain / DNS records setup on a single Ubuntu 18.04 droplet running with Django, Postgres, Nginx, Gunicorn

question

Cannot add external certificate generated from cloudflare to certificate list

question

Tutorial for let's encrypt wildcard?

Looking for something else?