Unable to login to bookstack from within webpage dashboard

[mylarhomestead]

HARDWARE
Raspberry Pi 4B 8GB

System
Installation method: Home Assistant OS
Core: 2025.7.1
Supervisor: 2025.06.2
Operating System: 15.2
Frontend: 20250702.1
SSL: Valid LetsEncrypt wildcard cert for *.mydomain.com
Home Assistant URL: https://ha.mydomain.com
Connectivity to Bookstack: Webpage Dashboard within HA using sidebar pointing to https://ha.mydomain.com:2665/

Bookstack Configuration
envvars:

• name: LOG_FAILED_LOGIN_MESSAGE
  value: Failed login for %u
• name: SESSION_COOKIE_NAME
  value: bookstack_session
• name: ALLOWED_IFRAME_HOSTS
  value: https://ha.mydomain.com https://192.168.32.125 <-ip address of the HA server
• name: ALLOWED_IFRAME_SOURCES
  value: "*"
  ssl: true
  certfile: fullchain.pem
  keyfile: privkey.pem

Issue:
Regardless of trying to login using the "OPEN WEB UI" button or using the sidebar, I am unable to login. It does not throw an error in the HA logs, it does not tell me that there was an authentication error with my credentials, it does not do anything other than take me back to the default page of bookstack. The only way to get it to work is if I remove the following from the environment variables:

• name: ALLOWED_IFRAME_HOSTS
  value: https://ha.mydomain.com https://192.168.143.125
  This will allow me to login using the "OPEN WEB UI" button but gives me a "refused to connect" error from the sidebar.

The only errors/warnings I am receiving from the addon logs are as follows:

[17:13:24] INFO: Starting NGINX...
nginx: [warn] the "listen ... http2" directive is deprecated, use the "http2" directive instead in /etc/nginx/servers/direct.conf:3
nginx: [warn] "ssl_stapling" ignored, no OCSP responder URL in the certificate "/ssl/fullchain.pem"

[Soosbrecht]

Same issue here, i also get a 419 Page expired error everytime.

[sinclairpaul]

Looks like others have solved this #225

[Soosbrecht]

No, i also have the iFrame variable added and it produces the error. If I remove it it works fine

[Soosbrecht]

The issue also occurs when installing bookstack through docker. I also get the 419 Page expired error when adding the IFRAME variable.

[Soosbrecht]

Is there any update on this issue?

[sinclairpaul]

The issue also occurs when installing bookstack through docker. I also get the 419 Page expired error when adding the IFRAME variable.

Then I would suggest logging at the source repo.