Console infinite loading behind NginxProxyManager

Hi All,

I am trying to get AppWrite to work behind NPM. I've followed the Medium guide to set proper headers, I've added my proxy configuration to NPM, and I can access the console loading page from any where using my domain name and path.

appwrite-traefik is configured to use my npm docker network, like all the other docker containers I proxy with npm.

However, the console is stuck with the red loading icon, and nothing moves further.

In addition, I cannot get a Let's encrypt certificate from NPM, and here's the response from certbot:

{
  "identifier": {
    "type": "dns",
    "value": "appwrite.example.com"
  },
  "status": "invalid",
  "expires": "2025-12-26T13:48:15Z",
  "challenges": [
    {
      "type": "http-01",
      "url": "https://acme-v02.api.letsencrypt.org/acme/chall/1310672856/629846761676/c2hXDQ",
      "status": "invalid",
      "validated": "2025-12-19T13:48:16Z",
      "error": {
        "type": "urn:ietf:params:acme:error:unauthorized",
        "detail": "myIPv6: Invalid response from http://appwrite.example.com/.well-known/acme-challenge/0YDALemzFEKAr40SLC2FMCEi6h1tu3RKoWMRbMnFE7w: 403",
        "status": 403
      },
      "token": "0YDALemzFEKAr40SLC2FMCEi6h1tu3RKoWMRbMnFE7w",
      "validationRecord": [
        {
          "url": "http://appwrite.example.com/.well-known/acme-challenge/0YDALemzFEKAr40SLC2FMCEi6h1tu3RKoWMRbMnFE7w",
          "hostname": "appwrite.example.com",
          "port": "80",
          "addressesResolved": [
            "my IPv4",
            "my IPv6"
          ],
          "addressUsed": "myIPv6"
        }
      ]
    }
  ]
}

appwrite.example.com being of course my proper domain, and Ipv4 and v6 are correct.

Getting a 403 seems to indicate I have a rights issue somewhere.

So my questions are: is the fact that the console does not load linked to the missing ssl certificate? what rights do I need to give to which volume (if any) to solve the 403 issue? Any other points I could be missing?

To be clear, accessing Appwrite console from the local network, the issue only exists from outside the local network.

Additional question, which logs could I inspect to find some sort of clues?