New(clean) start can't login

[Korenchkin]

hello,
i wanted to check progress,so i (again) started clean,no files in /app/data,i seem to have everything in compose right,i open port 8080,create user (first error),but user is created,try to login(on / address) and "✗Session validation failed"

:latest version (been a while,i noticed it last week,but decided to wait,could be longer)

(off topic,still have not found anything better than your project,so i hope you don't loose interest)
thanks,
k.

[Wikid82]

I did some security updates that require an environment variable. If you don't already have CHARON_ENCRYPTION_KEY= in your environment area of your compose, add that. In terminal run "openssl rand -base64 32". The end result should look something like

• CHARON_ENCRYPTION_KEY=AbCdEfGhIjKlMnOpQrStUvWkYz+=0123456789

If you already have that set, would you mind providing the container logs after you try and login.

[Korenchkin]

so, i tried regenerating the key(in case i missed something,i already have it set),wiped data directory,result is the same
there are similar errors sooner,seems like unpopulated database problem,or maybe just info,not sure,posting those around user creation...
before user creation:

2026/03/14 03:25:08 /app/backend/internal/cerberus/cerberus.go:109 record not found
[0.100ms] [rows:0] SELECT * FROM `security_configs` WHERE name = "default" ORDER BY `security_configs`.`id` LIMIT 1

2026/03/14 03:25:08 /app/backend/internal/cerberus/cerberus.go:117 record not found
[0.035ms] [rows:0] SELECT * FROM `settings` WHERE key = "feature.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1

2026/03/14 03:25:08 /app/backend/internal/cerberus/cerberus.go:122 record not found
[0.063ms] [rows:0] SELECT * FROM `settings` WHERE key = "security.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1

when creating user:

2026/03/14 03:25:27 /app/backend/internal/cerberus/cerberus.go:109 record not found
[0.100ms] [rows:0] SELECT * FROM `security_configs` WHERE name = "default" ORDER BY `security_configs`.`id` LIMIT 1

2026/03/14 03:25:27 /app/backend/internal/cerberus/cerberus.go:117 record not found
[0.035ms] [rows:0] SELECT * FROM `settings` WHERE key = "feature.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1

2026/03/14 03:25:27 /app/backend/internal/cerberus/cerberus.go:122 record not found
[0.037ms] [rows:0] SELECT * FROM `settings` WHERE key = "security.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1

    client=10.0.1.50
    latency=51.562474ms
    level=info
    method=POST
    msg=handled request
    path=/api/v1/setup
    request_id=9142d46d-4cd5-44f0-8498-db8dc99e039c
    status=201
    time=2026-03-14T03:25:27+01:00

[GIN] 2026/03/14 - 03:25:27 | 201 |  51.63ms |       10.0.1.50 | POST     "/api/v1/setup"

2026/03/14 03:25:27 /app/backend/internal/cerberus/cerberus.go:109 record not found
[0.086ms] [rows:0] SELECT * FROM `security_configs` WHERE name = "default" ORDER BY `security_configs`.`id` LIMIT 1

2026/03/14 03:25:27 /app/backend/internal/cerberus/cerberus.go:117 record not found
[0.076ms] [rows:0] SELECT * FROM `settings` WHERE key = "feature.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1

2026/03/14 03:25:27 /app/backend/internal/cerberus/cerberus.go:122 record not found
[0.028ms] [rows:0] SELECT * FROM `settings` WHERE key = "security.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1

    client=10.0.1.50
    latency=51.553064ms
    level=info
    method=POST
    msg=handled request
    path=/api/v1/auth/login
    request_id=55ac7bc7-249a-4d89-834e-7d1a8c6339e7
    status=200
    time=2026-03-14T03:25:27+01:00

[GIN] 2026/03/14 - 03:25:27 | 200 |  51.59ms |       10.0.1.50 | POST     "/api/v1/auth/login"

2026/03/14 03:25:27 /app/backend/internal/cerberus/cerberus.go:109 record not found
[0.086ms] [rows:0] SELECT * FROM `security_configs` WHERE name = "default" ORDER BY `security_configs`.`id` LIMIT 1

2026/03/14 03:25:27 /app/backend/internal/cerberus/cerberus.go:117 record not found
[0.045ms] [rows:0] SELECT * FROM `settings` WHERE key = "feature.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1

2026/03/14 03:25:27 /app/backend/internal/cerberus/cerberus.go:122 record not found
[0.028ms] [rows:0] SELECT * FROM `settings` WHERE key = "security.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1

    client=10.0.1.50
    latency=368.917µs
    level=info
    method=GET
    msg=handled request
    path=/api/v1/auth/me
    request_id=855eb875-fa50-4cd8-a8e7-f09c4e8d317b
    status=401
    time=2026-03-14T03:25:27+01:00

[GIN] 2026/03/14 - 03:25:27 | 401 | 399.853µs |       10.0.1.50 | GET      "/api/v1/auth/me"

and login:

2026/03/14 03:40:20 /app/backend/internal/cerberus/cerberus.go:109 record not found
[0.099ms] [rows:0] SELECT * FROM `security_configs` WHERE name = "default" ORDER BY `security_configs`.`id` LIMIT 1

2026/03/14 03:40:20 /app/backend/internal/cerberus/cerberus.go:117 record not found
[0.035ms] [rows:0] SELECT * FROM `settings` WHERE key = "feature.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1

2026/03/14 03:40:20 /app/backend/internal/cerberus/cerberus.go:122 record not found
[0.027ms] [rows:0] SELECT * FROM `settings` WHERE key = "security.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1

    client=10.0.1.50
    latency=51.279955ms
    level=info
    method=POST
    msg=handled request
    path=/api/v1/auth/login
    request_id=1e034707-60df-4366-bcab-4072a2a397f8
    status=200
    time=2026-03-14T03:40:20+01:00

[GIN] 2026/03/14 - 03:40:20 | 200 |  51.32ms |       10.0.1.50 | POST     "/api/v1/auth/login"

2026/03/14 03:40:20 /app/backend/internal/cerberus/cerberus.go:109 record not found
[0.093ms] [rows:0] SELECT * FROM `security_configs` WHERE name = "default" ORDER BY `security_configs`.`id` LIMIT 1

2026/03/14 03:40:20 /app/backend/internal/cerberus/cerberus.go:117 record not found
[0.036ms] [rows:0] SELECT * FROM `settings` WHERE key = "feature.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1

2026/03/14 03:40:20 /app/backend/internal/cerberus/cerberus.go:122 record not found
[0.030ms] [rows:0] SELECT * FROM `settings` WHERE key = "security.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1

    client=10.0.1.50
    latency=1.112203ms
    level=info
    method=GET
    msg=handled request
    path=/api/v1/auth/me
    request_id=df19a48b-5cde-4411-b6b3-396bde910a3a
    status=401
    time=2026-03-14T03:40:20+01:00

[GIN] 2026/03/14 - 03:40:20 | 401 |   1.45ms |       10.0.1.50 | GET      "/api/v1/auth/me"

config(komodo):

services:
  charon:
    image: ghcr.io/wikid82/charon:latest
    container_name: charon
    restart: unless-stopped
    env_file:
      - .env
    ports:
      - "82:80"
      - "445:443"
      - "445:443/udp"
      - "8080:8080"
    volumes:
      - $DOCKER_DATA/charon/charon-data:/app/data
#      - /var/run/docker.sock:/var/run/docker.sock:ro
    healthcheck:
      test: ["CMD-SHELL", "curl -fsS http://localhost:8080/api/v1/health || exit 1"]
      interval: 30s
      timeout: 10s
      retries: 3
      start_period: 40s

TZ and encryption key set in env section (.env in env_file)
always on clean(wipe data),777 on directory to be sure
(notice remapped ports,i'm using those on another caddy)

but if you tell me you can spin another clean instance and create and login no problem,i'll dig deeper (this is my pre-check if it is on my side or yours),i can't find anything for now...
k.

[Wikid82]

There was a bad wind storm in my area tonight and the power is out but as soon as I can this will be the first thing I look into. Sent from [Proton Mail](https://proton.me/mail/home) for Android.

…

-------- Original Message --------

On Friday, 03/13/26 at 22:41 Korenchkin ***@***.***> wrote: Korenchkin left a comment [(Wikid82/Charon#825)](#825 (comment)) so, i tried regenerating the key(in case i missed something,i already have it set),wiped data directory,result is the same there are similar errors sooner,seems like unpopulated database problem,or maybe just info,not sure,posting those around user creation... before user creation: 2026/03/14 03:25:08 /app/backend/internal/cerberus/cerberus.go:109 record not found [0.100ms] [rows:0] SELECT * FROM `security_configs` WHERE name = "default" ORDER BY `security_configs`.`id` LIMIT 1 2026/03/14 03:25:08 /app/backend/internal/cerberus/cerberus.go:117 record not found [0.035ms] [rows:0] SELECT * FROM `settings` WHERE key = "feature.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1 2026/03/14 03:25:08 /app/backend/internal/cerberus/cerberus.go:122 record not found [0.063ms] [rows:0] SELECT * FROM `settings` WHERE key = "security.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1 when creating user: 2026/03/14 03:25:27 /app/backend/internal/cerberus/cerberus.go:109 record not found [0.100ms] [rows:0] SELECT * FROM `security_configs` WHERE name = "default" ORDER BY `security_configs`.`id` LIMIT 1 2026/03/14 03:25:27 /app/backend/internal/cerberus/cerberus.go:117 record not found [0.035ms] [rows:0] SELECT * FROM `settings` WHERE key = "feature.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1 2026/03/14 03:25:27 /app/backend/internal/cerberus/cerberus.go:122 record not found [0.037ms] [rows:0] SELECT * FROM `settings` WHERE key = "security.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1 client=10.0.1.50 latency=51.562474ms level=info method=POST msg=handled request path=/api/v1/setup request_id=9142d46d-4cd5-44f0-8498-db8dc99e039c status=201 time=2026-03-14T03:25:27+01:00 [GIN] 2026/03/14 - 03:25:27 | 201 | 51.63ms | 10.0.1.50 | POST "/api/v1/setup" 2026/03/14 03:25:27 /app/backend/internal/cerberus/cerberus.go:109 record not found [0.086ms] [rows:0] SELECT * FROM `security_configs` WHERE name = "default" ORDER BY `security_configs`.`id` LIMIT 1 2026/03/14 03:25:27 /app/backend/internal/cerberus/cerberus.go:117 record not found [0.076ms] [rows:0] SELECT * FROM `settings` WHERE key = "feature.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1 2026/03/14 03:25:27 /app/backend/internal/cerberus/cerberus.go:122 record not found [0.028ms] [rows:0] SELECT * FROM `settings` WHERE key = "security.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1 client=10.0.1.50 latency=51.553064ms level=info method=POST msg=handled request path=/api/v1/auth/login request_id=55ac7bc7-249a-4d89-834e-7d1a8c6339e7 status=200 time=2026-03-14T03:25:27+01:00 [GIN] 2026/03/14 - 03:25:27 | 200 | 51.59ms | 10.0.1.50 | POST "/api/v1/auth/login" 2026/03/14 03:25:27 /app/backend/internal/cerberus/cerberus.go:109 record not found [0.086ms] [rows:0] SELECT * FROM `security_configs` WHERE name = "default" ORDER BY `security_configs`.`id` LIMIT 1 2026/03/14 03:25:27 /app/backend/internal/cerberus/cerberus.go:117 record not found [0.045ms] [rows:0] SELECT * FROM `settings` WHERE key = "feature.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1 2026/03/14 03:25:27 /app/backend/internal/cerberus/cerberus.go:122 record not found [0.028ms] [rows:0] SELECT * FROM `settings` WHERE key = "security.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1 client=10.0.1.50 latency=368.917µs level=info method=GET msg=handled request path=/api/v1/auth/me request_id=855eb875-fa50-4cd8-a8e7-f09c4e8d317b status=401 time=2026-03-14T03:25:27+01:00 [GIN] 2026/03/14 - 03:25:27 | 401 | 399.853µs | 10.0.1.50 | GET "/api/v1/auth/me" and login: 2026/03/14 03:40:20 /app/backend/internal/cerberus/cerberus.go:109 record not found [0.099ms] [rows:0] SELECT * FROM `security_configs` WHERE name = "default" ORDER BY `security_configs`.`id` LIMIT 1 2026/03/14 03:40:20 /app/backend/internal/cerberus/cerberus.go:117 record not found [0.035ms] [rows:0] SELECT * FROM `settings` WHERE key = "feature.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1 2026/03/14 03:40:20 /app/backend/internal/cerberus/cerberus.go:122 record not found [0.027ms] [rows:0] SELECT * FROM `settings` WHERE key = "security.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1 client=10.0.1.50 latency=51.279955ms level=info method=POST msg=handled request path=/api/v1/auth/login request_id=1e034707-60df-4366-bcab-4072a2a397f8 status=200 time=2026-03-14T03:40:20+01:00 [GIN] 2026/03/14 - 03:40:20 | 200 | 51.32ms | 10.0.1.50 | POST "/api/v1/auth/login" 2026/03/14 03:40:20 /app/backend/internal/cerberus/cerberus.go:109 record not found [0.093ms] [rows:0] SELECT * FROM `security_configs` WHERE name = "default" ORDER BY `security_configs`.`id` LIMIT 1 2026/03/14 03:40:20 /app/backend/internal/cerberus/cerberus.go:117 record not found [0.036ms] [rows:0] SELECT * FROM `settings` WHERE key = "feature.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1 2026/03/14 03:40:20 /app/backend/internal/cerberus/cerberus.go:122 record not found [0.030ms] [rows:0] SELECT * FROM `settings` WHERE key = "security.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1 client=10.0.1.50 latency=1.112203ms level=info method=GET msg=handled request path=/api/v1/auth/me request_id=df19a48b-5cde-4411-b6b3-396bde910a3a status=401 time=2026-03-14T03:40:20+01:00 [GIN] 2026/03/14 - 03:40:20 | 401 | 1.45ms | 10.0.1.50 | GET "/api/v1/auth/me" config(komodo): services: charon: image: ghcr.io/wikid82/charon:latest container_name: charon restart: unless-stopped env_file: - .env ports: - "82:80" - "445:443" - "445:443/udp" - "8080:8080" volumes: - $DOCKER_DATA/charon/charon-data:/app/data # - /var/run/docker.sock:/var/run/docker.sock:ro healthcheck: test: ["CMD-SHELL", "curl -fsS http://localhost:8080/api/v1/health || exit 1"] interval: 30s timeout: 10s retries: 3 start_period: 40s TZ and encryption key set in env section (.env in env_file) always on clean(wipe data),777 on directory to be sure (notice remapped ports,i'm using those on another caddy) but if you tell me you can spin another clean instance and create and login no problem,i'll dig deeper (this is my pre-check if it is on my side or yours),i can't find anything for now... k. — Reply to this email directly, [view it on GitHub](#825 (comment)), or [unsubscribe](https://github.com/notifications/unsubscribe-auth/BKCW5NLNIQNC4QNWT3BDMMD4QTBGZAVCNFSM6AAAAACWNOJKZKVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHM2DANJZGI2DSOBTGY). You are receiving this because you were assigned.Message ID: ***@***.***>

[Wikid82]

Thanks for the detailed logs. I think I have it figured out, I'm just not going to be able to complete the testing to confirm before I have to go to the day job. I'm not going to be back until late (at least for my timezone) so I thought I'd let you know now that I'll get it finished and merged into the next nightly build. Latest rebuilds every Monday morning (EST) so that is up to you if you want to switch tags or not since it would probably only be a few hours difference.

[Korenchkin]

that's okay,i was testing pangolin for some time,i like the ui,but it is too big and contains unneeded vpn (i have one on mikrotik),i liked logs (i could directly see blocked requests in good form factor),but had to go back to caddy(it just did not feel right),did some manual crowdsec plugin installation(that breaks on each update :) ),did goaccess(which i kinda don't need,there are statistics,but i'd just like red/green requests with some filters and geo countries),so basically i'm waiting for some stable-ish charon to switch,meanwhile i'm set and running,so i'll test on monday or when you have new version