Fresh setup behing nginx. First time setup blocked by XSRF on admin password creation step

[Krisjanis Pumpurs]

Hi. 

I am trying to setup evaluation instance of Fisheye/Crucible behind nginx on linux. Atm setup is reachable. But during setup when getting to admin account password creation, I get blocked by XSRF on app side. 

What could I be missing in config?

Log output:

2020-06-03 13:11:23,655 INFO [qtp2075952726-223 ] fisheye ServletUtils-send403 - 403: XSRF Error referer=https://app.exmaple.com/setup/password.do 

To this point I tried various version config.xml: defaults, and modified as shown in some community post examples

<web-server site-url="https://app.exmaple.com" context="/">
  <http bind="127.0.0.1:8060" proxy-host="app.exmaple.com" proxy-port="443" proxy-scheme="https"/>
</web-server>

<web-server site-url="https://app.exmaple.com" context="/">
  <http bind=":8060" proxy-host="app.exmaple.com" proxy-port="443" proxy-scheme="https"/>
</web-server>

 Nginx site proxy conf, also tried with 127.0.0.1 and FQDN

location / { 
  proxy_pass http://app.example.com:8060/;
  proxy_connect_timeout 150;
  proxy_send_timeout 100;
  proxy_read_timeout 100;
  proxy_buffers 4 32k;
  client_max_body_size 8m; 
  client_body_buffer_size 128k;
  proxy_buffering off;
  port_in_redirect off;
}