Can't claim server: "Not authorized" after "successful" claim (local and remote)

[Californian]

Server Version#: 1.41.2.9200-c6bbc1b53
Player Version#: web latest

Running in docker compose (latest stable) on debian 11, all system packages up to date and server was restarted immediately prior to installation (and several times during the process).

I’ve tried to claim my server in the following ways (below), all with the same result:

Not authorized

You do not have access to this server.

You may be able to claim it by choosing “Open Plex…” from the Plex menu in the macOS menu bar or Windows system tray. For more troubleshooting tips, see our support article.

Ways I’ve attempted to claim:

• PLEX_CLAIM env var (which says it’s successful in the server logs)
• not adding the PLEX_CLAIM env var, ssh tunneling into the server with port 32400 forwarded, and going to localhost:32400/web (which lets me add media libraries and, ostensibly, claim the server, but when I claim it either lets me log in if I haven’t yet done so or automatically redirects back if I have and either way still claims to be not authorized)
• after claiming in either of the above ways, editing the ~/.config/plex/Library/Application\ Support/Plex\ Media\ Server/Preferences.xml file to remove all key/value pairs with Online in them (the ones specified in the above-linked support article), restarting the server, then going back to localhost and re-claiming (same as second bullet point); the network tab of chrome dev tools shows a 401 in response to /claim.

I deleted the config folder and container and image between the first and second bullet points above. I also did each of these while already signed in, and after deleting all cookies. I also did this before and after (a) unlinking my Google account and (b) resetting my password. I’ve also redone all of these attempts after chown -Ring the ~/.config/plex folder with user:group 1000:1000; for some reason the Library folder in there is created as root despite the PLEX_UID and PLEX_GID specified as indicated in the docker-compose file. I’ve tried to alleviate this by setting user: 1000:1000 at the top level of the plex: service block in the compose file, but this leads to permissions errors in the server logs (despite all mounted folders also being owned by 1000:1000). I’ve done this all with non-adblocking DNS on two different networks (home and tethered to my phone).

I have no issues accessing the server either via localhost with SSH tunneling or via my reverse proxy on my domain.

I removed access from all devices in my account settings between attempts as well.

I’ve also run this script, specifying the location of Preferences.xml and it “succeeded”: GitHub - ChuckPa/UserCredentialReset: User Credential Reset utility for Plex

I’ve done this in a guest mode browser as well, i.e. no extensions etc.

My docker-compose.yml (my specific server url redacted) is below.

Any ideas?

If anyone from the product team sees this: I’m glad I left my jellyfin server up, it might have a janky ui but at least it’s actually functional. If I, as someone who works with docker professionally and who uses Linux on my main personal and work computers, can’t figure this out, good luck to your other users. It’s not even my first time using plex; I used it from like 2012-2022 and switched to jellyfin due to transcoding annoyances but thought I’d try it all out again to see if things had improved. It seems, if anything, as though things have actually regressed. Disappointing.

  plex:
    container_name: plex
    image: plexinc/pms-docker:plexpass
    restart: unless-stopped
    ports:
      - 32400:32400/tcp
      - 8324:8324/tcp
      - 32469:32469/tcp
      - 1900:1900/tcp
      - 1900:1900/udp
      - 32410:32410/udp
      - 32412:32412/udp
      - 32413:32413/udp
      - 32414:32414/udp
    environment:
      - TZ=UTC
      - ADVERTISE_IP=https://plex.********
      - PLEX_UID=1000
      - PLEX_GID=1000
    hostname: plex.********
    volumes:
      - $HOME/.config/plex:/config
      - /dev/shm:/transcode
      - $HOME/data/media:/media
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.plex.rule=Host(`plex.********`)"
      - "traefik.http.routers.plex.entrypoints=websecure"
      - "traefik.http.routers.plex.tls.certresolver=leresolver"
      - "traefik.http.routers.plex.tls=true"
      - "traefik.http.routers.plex.tls.domains=plex.********"
      - "traefik.http.routers.plex.service=plex"
      - "traefik.http.services.plex.loadbalancer.server.port=32400"

[dbirch]

Can you post a copy of your server logs?