I use duplicati on a headless vps. so no tray icon for me. i got the webservice password changed via the --webservice-password option.
i’m using it behind an apache reverse proxy but it doesn’t seem to want to allow the connection.
after doing some investgation it seems that chome and firefox block the setting of the refresh cookie because the domain attribute was incorrect for the current url.
You may also have to set some additional Host header forwarding configs like RequestHeader set X-Forwarded-For and X-Forwarded-Proto but it will take some experimenting. I hope this points you towards the right direction.