# Unable to embed Kibana dashboard on a reverse proxy server using Nginx

**URL:** https://discuss.elastic.co/t/unable-to-embed-kibana-dashboard-on-a-reverse-proxy-server-using-nginx/278521
**Category:** Kibana
**Created:** [July 13, 2021, 10:15am UTC](https://discuss.elastic.co/t/unable-to-embed-kibana-dashboard-on-a-reverse-proxy-server-using-nginx/278521 "2021-07-13T10:15:27Z")
**Posts on this page:** 4
**Page:** 1

<div class="post-metadata">

### Author: ![Fabian\_Matesa](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/fabian_matesa/32/91559_2.png) [@Fabian\_Matesa](https://discuss.elastic.co/u/Fabian_Matesa)
#### Post date: [July 13, 2021, 10:15am UTC](https://discuss.elastic.co/t/unable-to-embed-kibana-dashboard-on-a-reverse-proxy-server-using-nginx/278521/1 "2021-07-13T10:15:27Z")

</div>

I am trying to embed a Kibana dashboard using Nginx, but keep getting a blank screen. No errors are thrown (except for the expected "inline script" error), but nothing gets loaded. Kibana is deployed on an Azure cloud, and I don't have admin access, so I am unable to edit the .yaml file. I am trying to embed Kibana in my Angular app using iframe.  
Here is my Nginx config file:

```
worker_processes 1;

events {
    worker_connections 1024;
}

http {
    include mime.types;
    default_type application/octet-stream;
    sendfile on;
    keepalive_timeout 65;

    server {
        listen 80;
        server_name localhost;

        location / {
            root html;
            index index.html index.htm;
        }

        location /api {
            proxy_pass http://localhost:8080/<client>/api;
            proxy_http_version 1.1;
            proxy_set_header Upgrade $http_upgrade;
            proxy_set_header Connection 'upgrade';
            proxy_set_header Host $host;
            proxy_cache_bypass $http_upgrade;
            proxy_set_header X-Real-IP $remote_addr;
            proxy_set_header X-Forwarded-For $remote_addr;
        }

        location /kibana/ {
            add_header X-my-debug $http_referer;
            proxy_pass https://<company-name>.azure.elastic-cloud.com:<port>/;
            sub_filter_once off;
            sub_filter 'src="bootstrap.js' 'src="/kibana/bootstrap.js';
            proxy_set_header X-Real-IP $remote_addr;
            proxy_set_header Authorization '<auth-info>';
            proxy_set_header X-Found-Cluster cbca73a5db19409287b3e17ef1a3df82;
            proxy_set_header Host $host;
            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
            proxy_set_header X-Forwarded-Proto $scheme;
            proxy_set_header Connection "Keep-Alive";
            proxy_set_header Proxy-Connection "Keep-Alive";
            proxy_redirect off;
            add_header Content-Security-Policy "script-src 'self' <company-name>.azure.elastic-cloud.com:<port> 'unsafe-inline' 'unsafe-eval';" always;
        }

        location /bootstrap.js {
            proxy_pass https://<company-name>.azure.elastic-cloud.com:<port>/bootstrap.js;
            add_header Content-Security-Policy "script-src 'self' https://<company-name>.azure.elastic-cloud.com:<port> 'unsafe-inline' 'unsafe-eval';" always;
        }

        location /39457/ {
            proxy_pass https://<company-name>.azure.elastic-cloud.com:<port>/39457/;
            add_header Content-Security-Policy "script-src 'self' https://<company-name>.azure.elastic-cloud.com:<port> 'unsafe-inline' 'unsafe-eval';" always;
        }

        location /translations/ {
            proxy_pass https://<company-name>.azure.elastic-cloud.com:<port>/translations/;
        }

        location /node_modules/@kbn/ui-framework/dist/kui_light.css {
            proxy_pass https://<company-name>.azure.elastic-cloud.com:<port>/node_modules/@kbn/ui-framework/dist/kui_light.css;
        }

        location /ui/legacy_light_theme.css {
            proxy_pass https://<company-name>.azure.elastic-cloud.com:<port>/ui/legacy_light_theme.css;
        }
        
        location /api/core/capabilities {
            proxy_pass https://<company-name>.azure.elastic-cloud.com:<port>/api/core/capabilities;
        }

        location /ui/fonts/inter_ui/ {
            proxy_pass https://<company-name>.azure.elastic-cloud.com:<port>/ui/fonts/inter_ui/;
        }
        
        location /internal/ {
            proxy_set_header Authorization '<auth-info>';
            proxy_pass https://<company-name>.azure.elastic-cloud.com:<port>/internal/;
        }

        location /api/licensing/info {
            proxy_set_header Authorization '<auth-info>';
            proxy_pass https://<company-name>.azure.elastic-cloud.com:<port>/api/licensing/info;
        }

        location /api/saved_objects_tagging/tags {
            proxy_set_header Authorization '<auth-info>';
            proxy_pass https://<company-name>.azure.elastic-cloud.com:<port>/api/saved_objects_tagging/tags;
        }

        location /logout {
            proxy_set_header Authorization '<auth-info>';
            proxy_pass https://<company-name>.azure.elastic-cloud.com:<port>/logout;
        }

        location /api/ui_counters/_report {
            proxy_set_header Authorization '<auth-info>';
            proxy_pass https://<company-name>.azure.elastic-cloud.com:<port>/api/ui_counters/_report;
        }

        location /api/security/logout {
            proxy_set_header Authorization '<auth-info>';
            proxy_pass https://<company-name>.azure.elastic-cloud.com:<port>/api/security/logout;
        }

        # redirect server error pages to the static page /50x.html
        error_page 500 502 503 504 /50x.html;
    }

}

```

and I also have this in my index.html:

```
<meta http-equiv="Content-Security-Policy" 
  content="
  script-src 'self' https://<company-name>.azure.elastic-cloud.com:<port> 'unsafe-inline' 'unsafe-eval';
  frame-src 'self'https://<company-name>.azure.elastic-cloud.com:<port> 'unsafe-inline';
  style-src 'self' https://<company-name>.azure.elastic-cloud.com:<port> 'unsafe-inline';"
  >

```

---

<div class="post-metadata">

### Author: ![cheiligers](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/cheiligers/32/73114_2.png) [@cheiligers](https://discuss.elastic.co/u/cheiligers)
#### Post date: [July 14, 2021, 6:39pm UTC](https://discuss.elastic.co/t/unable-to-embed-kibana-dashboard-on-a-reverse-proxy-server-using-nginx/278521/2 "2021-07-14T18:39:52Z")

</div>

@Fabian_Matesa Welcome to the community!  
It looks like you might be missing auth as was the case for this [older post](https://discuss.elastic.co/t/embed-kibana-dashboard-to-external-ui-app/213172).

You can compare your nginx config with the one described in that post.

---

<div class="post-metadata">

### Author: ![cromat](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/cromat/32/91656_2.png) [@cromat](https://discuss.elastic.co/u/cromat)
#### Post date: [July 15, 2021, 8:46am UTC](https://discuss.elastic.co/t/unable-to-embed-kibana-dashboard-on-a-reverse-proxy-server-using-nginx/278521/3 "2021-07-15T08:46:51Z")

</div>

@cheiligers Have you even read the whole question? There is already Authorization header.

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [August 12, 2021, 8:47am UTC](https://discuss.elastic.co/t/unable-to-embed-kibana-dashboard-on-a-reverse-proxy-server-using-nginx/278521/4 "2021-08-12T08:47:49Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.