\
**Category:** Support\
**Created:** [February 9, 2025, 8:02am UTC](https://community.learningequality.org/t/html5-contents-not-displaying-in-kolibri/3601 "2025-02-09T08:02:51Z")\
**Posts on this page:** 20\
**Page:** 1
**Author:**  [@david\_ally](https://community.learningequality.org/u/david_ally)\
**Post date:** [February 9, 2025, 8:02am UTC](https://community.learningequality.org/t/html5-contents-not-displaying-in-kolibri/3601/1 "2025-02-09T08:02:51Z")
Hi Community,
I prepared some learning contents in exelearning that I exported as .zip. I uploaded the contents to a channel on kolibri studio.
On kolibri studio the contents displays fine with all the activities and all other things working fine, but when i use the same contents in instance of kolibri running behind an nginx reverse proxy, it does not display. I get a blank page with “[bauchi-edtech.org](http://bauchi-edtech.org) sent an invalid response” . The OS is Ubuntu server 24.04 LTS.
Using exelearning empowers coaches to create contents fast depending on their curriculum, and I would want to enable this in our local community. But I need help with this…
---
**Author:**  [@blaine](https://community.learningequality.org/u/blaine)\
**Post date:** [February 10, 2025, 3:26pm UTC](https://community.learningequality.org/t/html5-contents-not-displaying-in-kolibri/3601/2 "2025-02-10T15:26:37Z")
Hi @david_ally,
Kolibri serves ZIP content from a different port, for security reasons. Therefore if you run Kolibri behind a reverse proxy, you must account for this in your nginx and Kolibri configurations.
You’ll need to configure the `ZIP_CONTENT_ORIGIN` and/or `ZIP_CONTENT_PORT` options in your Kolibri’s `options.ini` file.
If you use `kolibri-server` without SSL, no further configuration is required. Here’s a similar thread where SSL is involved: [Studio content invalid response](https://community.learningequality.org/t/studio-content-invalid-response/2980)
Regards,
Blaine
---
**Author:**  [@david\_ally](https://community.learningequality.org/u/david_ally)\
**Post date:** [February 11, 2025, 7:41pm UTC](https://community.learningequality.org/t/html5-contents-not-displaying-in-kolibri/3601/3 "2025-02-11T19:41:17Z")
Hi Blaine,
Thank you for your response. I tested same zip contents in kolibri instance without reverse proxy, and it is fine.
I read the additional information provided on how to adjust for serving zip content under nginx reverse proxy with ssl, but in order not to be dealing with an erroneous information, I want to get you very clear, What do I need to set ZIP\_CONTENT\_ORIGIN and ZIP\_CONTENT\_PORT to?
Since the content is uploaded directly into kolibri, and for server install we already have 8081 for serving external contents, will this be adequate setting in nginx, listen on 8081?
Thanks once again!
David
---
**Author:**  [@blaine](https://community.learningequality.org/u/blaine)\
**Post date:** [February 11, 2025, 8:15pm UTC](https://community.learningequality.org/t/html5-contents-not-displaying-in-kolibri/3601/4 "2025-02-11T20:15:47Z")
Hi @david_ally,
Here are the descriptions for those configuration directives:
Description of `ZIP_CONTENT_ORIGIN`:
> When running by default (value blank), Kolibri frontend looks for the zipcontent endpoints on the same domain as Kolibri proper, but uses ZIP\_CONTENT\_PORT instead of HTTP\_PORT. When running behind a proxy, set the value to the port where zipcontent endpoint is served on, and it will be substituted for the port that Kolibri proper is being served on. When zipcontent is being served from a completely separate domain, you can set an absolute origin (full protocol plus domain, e.g. ‘[https://myzipcontent.com/](https://myzipcontent.com/)’) to be used for all zipcontent origin requests. It is strongly recommended that zipcontent is served from a different origin from the main Kolibri app, either by port or domain, to allow for proper sandboxing.
Description of `ZIP_CONTENT_PORT`:
> Sets the port that Kolibri will serve the alternate origin server on. This is the server that is used to serve all content for the zipcontent endpoint, so as to provide safe IFrame sandboxing but avoiding issues with null origins. This is the alternate origin server equivalent of HTTP\_PORT. It is strongly recommended that zipcontent is served from a different origin from the main Kolibri app, either by port or domain, to allow for proper sandboxing.
You’ll need to:
1. Set `ZIP_CONTENT_PORT` to a port that isn’t being used and won’t be exposed-- this port will be accessed via the nginx reverse proxy (for example, 8082)
2. Create a new nginx reverse proxy configuration, which should expose a different port than you’re already using for Kolibri which you said is 8081 (for example, port 8083)
3. Set the new nginx reverse proxy to proxy to Kolibri via the port configured by `ZIP_CONTENT_PORT` (for example, 8082)
4. Set the `ZIP_CONTENT_ORIGIN` to the nginx reverse proxy’s port (for example, port 8083)
5. Ensure any firewalls on the devices allow access to the nginx ports (for example, ports 8081 and 8083), and optionally prevent access to ports 8080 and 8082 which are direct-access to Kolibri
The `kolbiri-server` package does this by default, with the exception of configuring SSL.
Regards,
Blaine
---
**Author:**  [@david\_ally](https://community.learningequality.org/u/david_ally)\
**Post date:** [February 15, 2025, 12:17am UTC](https://community.learningequality.org/t/html5-contents-not-displaying-in-kolibri/3601/5 "2025-02-15T00:17:28Z")
Hi Blaine,
Thank you for the support… I tried to follow the guide… but something is not working out…
So I screenshot the options.
Uploading: sites-available.png…
Uploading: options\_ini.png…
How do I adjust my nginx file to include serving from [http://127.0.0.1:8081](http://127.0.0.1:8081) along the current [http://127.0.0.1:8080](http://127.0.0.1:8080)?
---
**Author:**  [@blaine](https://community.learningequality.org/u/blaine)\
**Post date:** [February 17, 2025, 3:27pm UTC](https://community.learningequality.org/t/html5-contents-not-displaying-in-kolibri/3601/6 "2025-02-17T15:27:52Z")
Hi @david_ally,
It looks like you may have attached screenshots but they didn’t come through.
Regarding the nginx configuration, you’ll need to create a separate `server` configuration block, such that you have one nginx `server` configuration for each (2 total) exposed port. The exposed ports are specified by the `listen` directive within each `server { }` configuration block. The most straightforward approach may be to duplicate the current `server` block that you have and change the `listen` port and the port which it proxies to, which is likely defined in a `location {}` block.
Regards,
Blaine
---
**Author:**  [@david\_ally](https://community.learningequality.org/u/david_ally)\
**Post date:** [February 18, 2025, 8:15pm UTC](https://community.learningequality.org/t/html5-contents-not-displaying-in-kolibri/3601/7 "2025-02-18T20:15:03Z")
This is my options.ini,
And I set up the nginx as this,
This is without the certbot.
It works for now … but I want to implement the proxying now .
Where the confusion lies for me is not clarifying between kolibri-server and kolibri installation.
Setting up a separate zip\_content\_port seems not necessary for kolibri-server, Is this conclusion correct?
Regards!
David
---
**Author:**  [@blaine](https://community.learningequality.org/u/blaine)\
**Post date:** [February 18, 2025, 8:35pm UTC](https://community.learningequality.org/t/html5-contents-not-displaying-in-kolibri/3601/8 "2025-02-18T20:35:23Z")
> [@blaine](#):
>
> It is strongly recommended that zipcontent is served from a different origin from the main Kolibri app, either by port or domain, to allow for proper sandboxing.
To properly reverse proxy Kolibri, you must use `ZIP_CONTENT_ORIGIN`. Please see the quoted comment above about the `ZIP_CONTENT_ORIGIN`. The screenshot of your nginx configuration does not serve zip content from a different origin, because the proxies exist in the same `server` block. The origin is essentially the combination of `server_name` & `port`. For security reasons, they should be served from separate origins.
For example, with the following configuration, you should configure `ZIP_CONTENT_ORIGIN = bauchi-edtech.net:81`:
```auto
server {
listen 81;
server_name bauchi-edtech.net;
location / {
proxy_pass http://localhost:8081;
proxy_http_version 1.1;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection keep-alive;
proxy_set_header Host $host;
proxy_cache_bypass $http_upgrade;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
}
}
```
> [@david\_ally](#):
>
> Where the confusion lies for me is not clarifying between kolibri-server and kolibri installation.
>
> Setting up a separate zip\_content\_port seems not necessary for kolibri-server, Is this conclusion correct?
The `kolibri-server` package configures nginx routing automatically, including for zip content. Although, it does not use an HTTP proxy, but rather UWSGI. It’s meant for performance deployments of Kolibri. Either approach requires manual effort to configure HTTPS.
---
**Author:**  [@david\_ally](https://community.learningequality.org/u/david_ally)\
**Post date:** [February 19, 2025, 6:34pm UTC](https://community.learningequality.org/t/html5-contents-not-displaying-in-kolibri/3601/9 "2025-02-19T18:34:33Z")
Hi Blaine,
I don’t know what exactly I am doing wrong, nginx -t gives success! but warn of conflicting 0.0.0.0:80 and 0.0.0.0:8081 which was ignore.
But kolibri would not start , I get this error;
Where am I getting it wrong?
David
---
**Author:**  [@richard](https://community.learningequality.org/u/richard)\
**Post date:** [February 19, 2025, 6:39pm UTC](https://community.learningequality.org/t/html5-contents-not-displaying-in-kolibri/3601/10 "2025-02-19T18:39:08Z")
Hi @david_ally,
It looks like your options.ini has a duplicate entry in it. The error there says “Duplicate keyword at line 145” so I would double check your options.ini and make sure no option is specified twice.
Kind Regards,
Richard
---
**Author:**  [@david\_ally](https://community.learningequality.org/u/david_ally)\
**Post date:** [February 26, 2025, 1:19am UTC](https://community.learningequality.org/t/html5-contents-not-displaying-in-kolibri/3601/11 "2025-02-26T01:19:10Z")
I don’t know why I cannot connect to kolibri-server. I have the everything installed on ubuntu server 24.04. My nginx installation for ssl is as attached here with other screenshots.
I don’t know where the warnings is coming from… I have checked relevant files but could not locate where the duplicate server name occurs
I checked the server is enable and running, when I tried accessing it,all I get is this screen;
This is the detail of the running server;
What exactly could be my configuration error? Thanks for the support!
Regards
david
---
**Author:**  [@blaine](https://community.learningequality.org/u/blaine)\
**Post date:** [February 26, 2025, 3:44pm UTC](https://community.learningequality.org/t/html5-contents-not-displaying-in-kolibri/3601/12 "2025-02-26T15:44:23Z")
Hi @david_ally,
The warnings shown after running `nginx -t` do seem to pertinent. Any `server` block configured in `nginx` must have either of the following, for a single IP address:
- a different `server_name` if using the same port in `listen`
- a different port specified in `listen` if using the same `server_name`
The config you shared prior did have a `server_name`. It also looks like you’re now using `kolibri-server`? I would advise you to check for extraneous configurations in the `/etc/nginx/conf.d/` and/or `/etc/nginx/sites-available`. The `kolibri-server` installation should register a file within `/etc/nginx` that likely `includes` an `nginx.conf` from `/etc/kolibri`.
Customization of that `nginx.conf`, like for SSL, should be done in `/etc/kolibri/nginx.d/` but I will need to research how that is achieved.
Regards,
Blaine
---
**Author:**  [@david\_ally](https://community.learningequality.org/u/david_ally)\
**Post date:** [February 27, 2025, 12:11am UTC](https://community.learningequality.org/t/html5-contents-not-displaying-in-kolibri/3601/13 "2025-02-27T00:11:00Z")
Thank you Blaine.
Well… in the meantime, I rolled back everything related to kolibri-server, nginx, certbot etc… and I got the kolibri instance starting and loading fine.
Yes, i would prefer running kolibri-server, but it seems doing this creates many files hidden here and there that makes it difficult to know where to look for configuration problems.
But I wont give up on using kolibri-server, what I have read looks simple, but implementing just got complex from somewhere I don’t know.
Whether serving html5 contents or any other, it seems kolibri-server configures ALL the necessary ports, for example, 8080 for normal, 8081 for zip contents. So, setting up reverse-proxy should have 2 separate location statements with these two ports specified in separate server blocks within the sites-available file? For example;
Server {
listen 8080;
```
location / {
proxy_pass http://localhost:8080;
}
```
}
server {
listen 8081;
location /.kolibri {
proxy\_pass [http://localhost:8081](http://localhost:8081);
}
}
Certbot addition with listen port on 443 and other certificate statement…
Above is what I thought should have worked, but as it turns out it did not work… i digged further and found that kolibri-server creates other files like /etc/nginx and /etc/kolibri, etc… so the question arise as to which of these files should be used for setting up additional items for serving both html5(zip) and other contents when using kolibri-server?
Installing kolibri-server installs additions like nginx and others, so which configuration files takes precedence?.
Regards!
David
---
**Author:**  [@blaine](https://community.learningequality.org/u/blaine)\
**Post date:** [February 28, 2025, 3:49pm UTC](https://community.learningequality.org/t/html5-contents-not-displaying-in-kolibri/3601/14 "2025-02-28T15:49:15Z")
> [@david\_ally](#):
>
> should have 2 separate location statements with these two ports specified in separate server blocks within the sites-available file?
Yes that’s correct. Although, in your second `location` block it has a path `/.kolibri` which means you would have to also define that in your `ZIP_CONTENT_ORIGIN`. Otherwise, the location paths should be the same: `/`
> Certbot addition with listen port on 443 and other certificate statement…
Insecure webservers generally use ports like 80 (default), 8080, 8000. The default secure port is 443, and alternatively 8443, so for example, you could use 443 for Kolibri and 8443 for the zip content.
> so the question arise as to which of these files should be used for setting up additional items for serving both html5(zip) and other contents when using kolibri-server?
The nginx file that kolibri-server uses should reside in `/etc/kolibri/nginx.conf`. There’s a bit of misdirection since `kolibri-server` should also install a file into `/etc/nginx` (probably `/etc/nginx/conf.d`) which sources the file in `/etc/kolibri/nginx.conf` via an [nginx include](https://serverfault.com/questions/950857/using-include-in-nginx-server-block-and-where-to-save-the-includes) (a way of splitting configuration into separate files and composing them into one file via the `include` directive).
Nginx will utilize the first configuration it finds for a server-name and port, and it uses the same `include` directive itself to source configurations, initiated from the core config `/etc/nginx/nginx.conf`. The core config likely includes configurations from `conf.d` and `sites-available`, but the order of which should be evident in `/etc/nginx/nginx.conf`. It is sometimes common to see config files prefixed with numbers like `00-kolibri.conf` to enforce the order in which files are included from a directory. Although, it’s better to remove conflicting config files in this case.
Regards,
Blaine
---
**Author:**  [@david\_ally](https://community.learningequality.org/u/david_ally)\
**Post date:** [March 5, 2025, 9:05am UTC](https://community.learningequality.org/t/html5-contents-not-displaying-in-kolibri/3601/15 "2025-03-05T09:05:14Z")
Hi Blaine,
which file is referred to here,
There is no kolibri.conf anywhere here…
Regards!
David
---
**Author:**  [@david\_ally](https://community.learningequality.org/u/david_ally)\
**Post date:** [March 5, 2025, 7:01pm UTC](https://community.learningequality.org/t/html5-contents-not-displaying-in-kolibri/3601/16 "2025-03-05T19:01:11Z")
I am running kolibri-server on Ubuntu 24.04 Server and but I get this error whenever i tried to access html/zip files
sudo systemctl restart kolibri-server have a warning error in it;
How do I resolve this, please?
Regards!
David
---
**Author:**  [@blaine](https://community.learningequality.org/u/blaine)\
**Post date:** [March 6, 2025, 4:44pm UTC](https://community.learningequality.org/t/html5-contents-not-displaying-in-kolibri/3601/17 "2025-03-06T16:44:50Z")
Hi @david_ally,
The `/etc/kolibri/nginx.d` directory is for customization of Kolibri’s nginx config. Any configuration files are included from that directory similarly to `/etc/nginx/conf.d`. In actuality, `kolibri-server` writes a file to `/etc/nginx/conf.d/kolibri.conf` which has the includes for `/etc/kolibri/nginx.d`.
My apologies I mistakenly read the source code as writing the file to `/etc/kolibri/nginx.conf`. The `kolibri-server` service creates the file dynamically to align with Kolibri’s `options.ini`, but it actually writes the file to the Kolibri home directory.
So if `kolibri-server` was installed and configured to create a new `kolibri` user, the location of the file should be something like `/var/kolibri/.kolibri/nginx.conf`. Note: this again depends on what user was provided when it was installed. For example, if you specified your existing `david` user during installation, then the home directory would be `/home/david/.kolibri` by default.
If the `nginx.conf` file does not exist in your KOLIBRI\_HOME, there should be a python script at `/usr/share/kolibri-server/kolibri_server_setup.py` which can generate the file. You may generate the `nginx.conf` like so:
```auto
sudo su -c '/usr/share/kolibri-server/kolibri_server_setup.py' $(cat /etc/kolibri/username)
```
The latest error you shared could be related to missing `ssl` on your `listen` directive. Could you try updating that to `listen 8081 ssl;`
So to summarize:
- the KOLIBRI\_HOME directory depends on the user provided to `kolibri-server` during installation
- `/etc/nginx/conf.d/kolibri.conf` is created and loads additional configurations from `/etc/kolibri/nginx.d/`
- `$KOLIBRI_HOME/nginx.conf` is also created when `kolibri-server` starts up
- `$KOLIBRI_HOME/nginx.conf` can be created manually with `/usr/share/kolibri-server/kolibri_server_setup.py`
- be sure to have `ssl` on any `listen` directives if it’s meant to provide secure HTTPS content
Regards,
Blaine
---
**Author:**  [@david\_ally](https://community.learningequality.org/u/david_ally)\
**Post date:** [March 6, 2025, 11:12pm UTC](https://community.learningequality.org/t/html5-contents-not-displaying-in-kolibri/3601/18 "2025-03-06T23:12:47Z")
Hi Blaine,
Thanks always… I will revert with progress…
Regards
David
---
**Author:**  [@david\_ally](https://community.learningequality.org/u/david_ally)\
**Post date:** [March 7, 2025, 5:17am UTC](https://community.learningequality.org/t/html5-contents-not-displaying-in-kolibri/3601/19 "2025-03-07T05:17:05Z")
Hi Blaine,
I got some good results, and intend to document the process and make it available to the community. I have both kolibri and zip/html5 contents working now. But there is this warning still showing when I check the kolibri-server status; See the attached screenshot, please
$sudo systemctl status kolibri;
What could be responsible for this and what could be the implication on the running instance? I want to clear this out of the way and then do the documentation of the process I used.
Once again thanks for the technical guidance!
Regards!
David
---
**Author:**  [@blaine](https://community.learningequality.org/u/blaine)\
**Post date:** [March 7, 2025, 3:05pm UTC](https://community.learningequality.org/t/html5-contents-not-displaying-in-kolibri/3601/20 "2025-03-07T15:05:11Z")
Hi @david_ally,
That’s great news! Thank you for your time navigating this. There’s surely opportunity for improvement, so we welcome anything you can share.
Regarding the error, I can’t quite tell the cause or outcome of the error. I believe the error should also be documented in the Kolibri logs, which are located in the KOLIBRI\_HOME directory at `logs/kolibri.txt`. If you’re able to locate it there, and if you could share that, it would be helpful to determine the impact.
Regards,
Blaine