Nextcloud with Letsencrypt using OMV and docker-compose - Q&A

After correcting these right issues i could proceed and finish DB creation by Nextcloud. The user and DB was created on the MariaDB instance by the nextcloud installer-

Nevertheless my nextcloud site now shows this:

Internal Server Error

The server encountered an internal error and was unable to complete your request.
Please contact the server administrator if this error reappears multiple times, please include the technical details below in your report.
More details can be found in the server log.

I could not find any related log entry....

Any ideas?

How can I reattach nextcloud to mariadb since I am getting SQLite is currently being used as the backend database. For larger installations we recommend that you switch to a different database backend. This is particularly recommended when using the desktop client for file synchronisation. To migrate to another database use the command line tool: 'occ db:convert-type', or see the documentation ↗. ?

Is there a little guide how to setup fail2ban for this setting running nextcloud, letsencrypt and mariadb in containers? Can I use the OMV-Extras plugin directly or do I need to configure the fail2ban instance within the letsencrypt container?

How does the latest filter have to look like? Which log-level in nextcloud is required?

Hi, I did everything as written in the macom guide, but when I want to go on nextcloud.asprodent.com.ua I get error 404

version: "2"
services:
  nextcloud:
    image: linuxserver/nextcloud
    container_name: nextcloud
    environment:
      - PUID=997 #change PUID if needed
      - PGID=100  #change PGID if needed
      - TZ=Europe/Kiev #change Time Zone if needed
    volumes:
      - /srv/dev-disk-by-label-disk1/appdata/nextcloud/config:/config #/srv/dev-disk-by-label-disk1 needs to be adjusted
      - /srv/dev-disk-by-label-disk1/appdata/nextcloud/data:/data     #/srv/dev-disk-by-label-disk1 needs to be adjusted
    depends_on:
      - mariadb
#    ports: # uncomment this and the next line if you want to bypass the proxy
#      - 450:443
    restart: unless-stopped
  mariadb:
    image: linuxserver/mariadb
    container_name: nextclouddb
    environment:
      - PUID=997 #change PUID if needed
      - PGID=100  #change PGID if needed
      - MYSQL_ROOT_PASSWORD=******  #change password
      - TZ=Europe/Kiev #Change Time Zone if needed
    volumes:
      - /srv/dev-disk-by-label-disk1/appdata/nextclouddb:/config    #/srv/dev-disk-by-label-disk1 needs to be adjusted
    restart: unless-stopped
  letsencrypt:
    image: linuxserver/letsencrypt
    container_name: letsencrypt
    cap_add:
      - NET_ADMIN
    environment:
      - PUID=997 #change PUID if needed
      - PGID=100  #change PGID if needed
      - TZ=Europe/Kiev # change Time Zone if needed
      - URL=my.domain.com #insert your domain name - yourdomain.url
      - SUBDOMAINS=www,nextcloud
      - ONLY_SUBDOMAINS=fasle
      - VALIDATION=duckdns
      - DUCKDNSTOKEN=***************
      - EMAIL=******** # define email; required to renew certificate
    volumes:
      - /srv/dev-disk-by-label-disk1/appdata/letsencrypt:/config  #/srv/dev-disk-by-label-disk1 needs to be adjusted
    ports:
      - 444:443
      - 81:80
    restart: unless-stopped

<?php
$CONFIG = array (
  'memcache.local' => '\OC\Memcache\APCu',
  'datadirectory' => '/data',
  'trusted_proxies' => 
   array (
     0 => 'letsencrypt',
   ),
  'overwrite.cli.url' => 'https://nextcloud.my.domain.com',
  'overwritehost' => 'nextcloud.amy.domain.com',
  'overwriteprotokol' => 'https'.
  'trusted_domains' => 
   array (
     0 => 'nextcloud.my.domain.com:443',
   ),
  );

When I go to http://nextcloud.asprodent.com.ua:81/ I get welcome screen OMV 5

How I can fix it? How I can go welcome screen Nextcloud?

Zitat von dvortsov

Hi, I did everything as written in the macom guide, but when I want to go on nextcloud.asprodent.com.ua I get error 404

Code

version: "2"
services:
  nextcloud:
    image: linuxserver/nextcloud
    container_name: nextcloud
    environment:
      - PUID=997 #change PUID if needed
      - PGID=100  #change PGID if needed
      - TZ=Europe/Kiev #change Time Zone if needed
    volumes:
      - /srv/dev-disk-by-id-md-name-nanopim4v2-RAID1/RAID1/appdata/nextcloud/config:/config #/srv/dev-disk-by-label-disk1 needs to be adjusted
      - /srv/dev-disk-by-id-md-name-nanopim4v2-RAID1/RAID1/appdata/nextcloud/data:/data     #/srv/dev-disk-by-label-disk1 needs to be adjusted
    depends_on:
      - mariadb
#    ports: # uncomment this and the next line if you want to bypass the proxy
#      - 450:443
    restart: unless-stopped
  mariadb:
    image: linuxserver/mariadb
    container_name: nextclouddb
    environment:
      - PUID=997 #change PUID if needed
      - PGID=100  #change PGID if needed
      - MYSQL_ROOT_PASSWORD=******  #change password
      - TZ=Europe/Kiev #Change Time Zone if needed
    volumes:
      - /srv/dev-disk-by-id-md-name-nanopim4v2-RAID1/RAID1/appdata/nextclouddb:/config    #/srv/dev-disk-by-label-disk1 needs to be adjusted
    restart: unless-stopped
  letsencrypt:
    image: linuxserver/letsencrypt
    container_name: letsencrypt
    cap_add:
      - NET_ADMIN
    environment:
      - PUID=997 #change PUID if needed
      - PGID=100  #change PGID if needed
      - TZ=Europe/Kiev # change Time Zone if needed
      - URL=asprodent.duckdns.org #insert your domain name - yourdomain.url
      - SUBDOMAINS=www,nextcloud
      - ONLY_SUBDOMAINS=fasle
      - VALIDATION=duckdns
      - DUCKDNSTOKEN=***************
      - EMAIL=******** # define email; required to renew certificate
    volumes:
      - /srv/dev-disk-by-id-md-name-nanopim4v2-RAID1/RAID1/appdata/letsencrypt:/config  #/srv/dev-disk-by-label-disk1 needs to be adjusted
    ports:
      - 444:443
      - 81:80
    restart: unless-stopped

Alles anzeigen

PHP

<?php
$CONFIG = array (
  'memcache.local' => '\OC\Memcache\APCu',
  'datadirectory' => '/data',
  'trusted_proxies' => 
   array (
     0 => 'letsencrypt',
   ),
  'overwrite.cli.url' => 'https://nextcloud.asprodent.duckdns.org',
  'overwritehost' => 'nextcloud.asprodent.duckdns.org',
  'overwriteprotokol' => 'https'.
  'trusted_domains' => 
   array (
     0 => 'nextcloud.asprodent.duckdns.org:443',
   ),
  );

Alles anzeigen

When I go to http://nextcloud.asprodent.com.ua:81/ I get welcome screen OMV 5

How I can fix it? How I can go welcome screen Nextcloud?

Well it is working in a way since http://nextcloud.asprodent.com.ua:81/ land on your OMV login page! LOL

Zitat von Nefertiti

Well it is working in a way since http://nextcloud.asprodent.com.ua:81/ land on your OMV login page

I changed the port for OMV, then just page 404, and no welcome screen Nextcloud

Would you mind to post your proxy-confs hide the sensitive data.

Zitat von Nefertiti

Would you mind to post your proxy-confs hide the sensitive data.

Hid sensitive data in my post

Still I do not see your letencrypt file proxy-confs

and I think

array (

0 => 'yourlocal_ip:443',

1 => 'nextcloud.yourdomain_name.duckdns.org',

),

Zitat von Nefertiti

Still I do not see your letencrypt file proxy-confs

and I think

array (

0 => 'yourlocal_ip:443',

1 => 'nextcloud.yourdomain_name.duckdns.org',

),

Alles anzeigen

nextcloud.subdomain.conf

# make sure that your dns has a cname set for nextcloud
# assuming this container is called "letsencrypt", edit your nextcloud container's config
# located at /config/www/nextcloud/config/config.php and add the following lines before the ");":
#  'trusted_proxies' => ['letsencrypt'],
#  'overwrite.cli.url' => 'https://nextcloud.your-domain.com/',
#  'overwritehost' => 'nextcloud.your-domain.com',
#  'overwriteprotocol' => 'https',
#
# Also don't forget to add your domain name to the trusted domains array. It should look somewhat like this:
#  array (
#    0 => '192.168.0.1:444', # This line may look different on your setup, don't modify it.
#    1 => 'nextcloud.your-domain.com',
#  ),

server {
    listen 443 ssl;
    listen [::]:443 ssl;

    server_name nextcloud.*;

    include /config/nginx/ssl.conf;

    client_max_body_size 0;

    location / {
        include /config/nginx/proxy.conf;
        resolver 127.0.0.11 valid=30s;
        set $upstream_app nextcloud;
        set $upstream_port 443;
        set $upstream_proto https;
        proxy_pass $upstream_proto://$upstream_app:$upstream_port;

        proxy_max_temp_file_size 2048m;
    }
}

here the way it should be 2048 is ok if you are not using arm processor otherwise 1024

# make sure that your dns has a cname set for nextcloud
# assuming this container is called "letsencrypt", edit your nextcloud container's config
# located at /config/www/nextcloud/config/config.php and add the following lines before the ");":
#  'trusted_proxies' => ['letsencrypt'],
#  'overwrite.cli.url' => 'https://nextcloud.your-domain.com/',
#  'overwritehost' => 'nextcloud.your-domain.com',
#  'overwriteprotocol' => 'https',
#
# Also don't forget to add your domain name to the trusted domains array. It should look somewhat like this:
#  array (
#    0 => '192.168.0.1:444', # This line may look different on your setup, don't modify it.
#    1 => 'nextcloud.your-domain.com',
#  ),

server {
    listen 443 ssl;

    server_name nextcloud.*;

    include /config/nginx/ssl.conf;

    client_max_body_size 0;

    location / {
        include /config/nginx/proxy.conf;
        resolver 127.0.0.11 valid=30s;
        set $upstream_nextcloud nextcloud;
        proxy_max_temp_file_size 1024m;
        proxy_pass https://$upstream_nextcloud:443;
    }
}

And my php I use port 444 I do not use doker compose it might be different for you but dot forget I think you need to be able to login in your nextcloud locally before doing anything else

$CONFIG = array (
  'memcache.local' => '\\OC\\Memcache\\APCu',
  'datadirectory' => '/data',
  'instanceid' => 'aaaaaaa',
  'passwordsalt' => 'xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx',
  'secret' => 'xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx',
  'trusted_domains' => 
  array (
    0 => 'Yourlocal_iP:444',
    1 => 'nextcloud.xxxxxxxxxxx.duckdns.org',
  ),
  'overwrite.cli.url' => 'https://nextcloud.xxxxxxxxxxxxxx.duckdns.org',
  'overwritehost' => 'nextcloud.xxxxxxxxxxx.duckdns.org',
  'overwriteprotocol' => 'https',
  'dbtype' => 'mysql',
  'version' => '19.0.0.12',
  'overwrite.cli.url' => 'https://Yourlocal_iP:444',
  'dbname' => 'nextcloud',
  'dbhost' => 'Yourlocal_iP:3306',
  'dbport' => '',
  'dbtableprefix' => 'oc_',
  'mysql.utf8mb4' => true,
  'dbuser' => 'xxxxx',
  'dbpassword' => 'xxxxxx',
  'installed' => true,

);

Zitat von Nefertiti

Well it is working in a way since http://nextcloud.asprodent.com.ua:81/ land on your OMV login page! LOL

This sounds that something is wrong with your port forwarding.

Can you post a screenshot of your port forwards and the log of the letsencrypt container?

I can’t connect to nextcloud even from LAN

I changed 2 routers, on Mikrotik when I forward ports 443 WAN on 444 LAN I lost my Internet connection.

I ran through this 2 times from scratch now and cannot get it to work. I am using 100% the exact same configuration as provided in the guide.

The only difference is that i am not using docker-compose but portainer. Should not be any different i guess.

I assumed that all containers are connected to the same bridge (for me standard bridge network) as this is not mentioned in the guide.

The yml sample of the guide posts ports as for example:

    ports:
      - 444:443
      - 81:80

By reading the docker-compose manual this transaltes to horst_port:container_port for portainer.

Is that correct? Might this be wrong in the guide?

It is beginning to be frustrating here

When trying to access https://my.url/nextcloud i get a blank/white page. Looking at the html source of it, i see that it is some OMV 404 error behind.

monsen

docker-compose automatically creates a user-defined bridge network for all containers in the same yml file. You probably have to do this by hand or integrate it into your portioner stack. They won't find each other if they are only connected to the general bridge network.

@dvorstov what is the output of the letsencrypt container logs?