Nextcloud with Letsencrypt using OMV and docker-compose - Q&A

I actually also don’t use sub folder method. I can’t spot an obvious error. What is the output of the letsencrypt container log?

Zitat von Morlan

I actually also don’t use sub folder method. I can’t spot an obvious error. What is the output of the letsencrypt container log?

nextcloud.subfolder.conf and nextcloud.subdomain.conf same error

letsencrypt log :

[cont-init.d] 90-config: exited 0.
[cont-init.d] 99-custom-files: executing... 
[custom-init] no custom files found exiting...
[cont-init.d] 99-custom-files: exited 0.
[cont-init.d] done.
[services.d] starting services
[services.d] done.
nginx: [alert] detected a LuaJIT version which is not OpenResty's; many optimizations will be disabled and performance will be compromised (see https://github.com/openresty/luajit2 for OpenResty's LuaJIT or, even better, consider using the OpenResty releases from https://openresty.org/en/download.html)
Server Ready 

nextcloud.subdomain.conf:

# make sure that your dns has a cname set for nextcloud
# assuming this container is called "swag", edit your nextcloud container's config
# located at /config/www/nextcloud/config/config.php and add the following lines before the ");":
#  'trusted_proxies' => ['swag'],
#  'overwrite.cli.url' => 'https://nextcloud.your-domain.com/',
#  'overwritehost' => 'nextcloud.your-domain.com',
#  'overwriteprotocol' => 'https',
#
# Also don't forget to add your domain name to the trusted domains array. It should look somewhat like this:
#  array (
#    0 => '192.168.0.1:444', # This line may look different on your setup, don't modify it.
#    1 => 'nextcloud.your-domain.com',
#  ),

server {
    listen 443 ssl;
    listen [::]:443 ssl;

    server_name nextcloud.*;

    include /config/nginx/ssl.conf;

    client_max_body_size 0;

    location / {
        include /config/nginx/proxy.conf;
        resolver 127.0.0.11 valid=30s;
        set $upstream_app nextcloud;
        set $upstream_port 443;
        set $upstream_proto https;
        proxy_pass $upstream_proto://$upstream_app:$upstream_port;

        proxy_max_temp_file_size 1024m;
    }
}

config.php:

<?php
$CONFIG = array
 (
  'memcache.local' => '\OC\Memcache\APCu',
  'datadirectory' => '/data',
  'trusted_proxies' => 
  array (
    0 => 'letsencrypt',
  ),
  'overwrite.cli.url' => 'https://nextcloud.xxxx.duckdns.org',
  'overwritehost' => 'nextcloud.xxxx.duckdns.org',
  'overwriteprotocol' => 'https',
  'trusted_domains' => 
  array (
    0 => 'nextcloud.xxxx.duckdns.org',
  ),

and when I type: https://nextcloud.xxxx.duckdns.org I get : Welcome to our server

Zitat von Agricola

In your compose file try this instead in the bottom section:

- URL=duckdns.org

- SUBDOMAINS=xxxx

- VALIDATION=http

The subdomains you have listed on line 46 needs to be the same subdomains you have listed earlier on line 23. The ones you got from DuckDNS. And then in your .php file instead of nextcloud.xxxx just use your xxx subdomain.

Like this:

Code

'overwrite.cli.url' => 'https://xxxx.duckdns.org',
  'overwritehost' => 'xxxx.duckdns.org',
  'overwriteprotocol' => 'https',
  'trusted_domains' => 
  array (
    0 => 'xxxx.duckdns.org',
  ),

in your nextcloud.subdomain.conf file change your file size to 2048. And instead of nextcloud.* just use your subdomain you got from duckdns: xxx.*

What I did to set up my Nextcloud may not be the way most have set up theirs, but my Nextcloud address is simply https://xxx.duckdns.org

I hope this helps and is not too confusing.

Alles anzeigen

I followed the instructions to the letter and I get: welcome to our server

Zitat von Agricola

All of my cut/paste was a bit confusing. Let me post my example files:

docker-compose.yml

---

version: "2"

services:

nextcloud:

image: linuxserver/nextcloud

container_name: nextcloud

environment:

- PUID=1000

- PGID=100

- TZ=America/Chicago

volumes:

- /srv/dev-disk-by-label-disk1/AppData/Nextcloud:/config

- /srv/dev-disk-by-label-disk1/Nextcloud:/data

depends_on:

- mariadb

# ports: # uncomment this and the next line if you want to bypass the proxy

# - 450:443

restart: unless-stopped

mariadb:

image: linuxserver/mariadb

container_name: nextclouddb

environment:

- PUID=1000

- PGID=100

- MYSQL_ROOT_PASSWORD=MyPassword

- TZ=America/Chicago

volumes:

- /srv/dev-disk-by-label-disk1/AppData/Nextclouddb:/config

restart: unless-stopped

duckdns:

image: linuxserver/duckdns

container_name: duckdns

environment:

- PUID=1000

- PGID=100

- TZ=America/Chicago

- SUBDOMAINS=abc,def,ghi,jkl,mno

- TOKEN=YourSecretToken

restart: unless-stopped

swag:

image: linuxserver/swag

container_name: swag

cap_add:

- NET_ADMIN

environment:

- ONLY_SUBDOMAINS=true

- PUID=1000

- PGID=100

- TZ=America/Chicago

- URL=duckdns.org

- SUBDOMAINS=abc,def,ghi,jkl,mno

- VALIDATION=http

- EMAIL=mickey@mouse.com

volumes:

- /srv/dev-disk-by-label-disk1/AppData/Swag:/config

ports:

- 444:443

- 81:80

restart: unless-stopped

nextcloud.subdomain.conf

# make sure that your dns has a cname set for nextcloud

# assuming this container is called "letsencrypt", edit your nextcloud container's config

# located at /config/www/nextcloud/config/config.php and add the following lines before the ");":

# 'trusted_proxies' => ['letsencrypt'],

# 'overwrite.cli.url' => 'https://nextcloud.your-domain.com/',

# 'overwritehost' => 'nextcloud.your-domain.com',

# 'overwriteprotocol' => 'https',

#

# Also don't forget to add your domain name to the trusted domains array. It should look somewhat like this:

# array (

# 0 => '192.168.0.1:444', # This line may look different on your setup, don't modify it.

# 1 => 'nextcloud.your-domain.com',

# ),

server {

listen 443 ssl;

listen [::]:443 ssl;

server_name abc.*;

include /config/nginx/ssl.conf;

client_max_body_size 0;

location / {

include /config/nginx/proxy.conf;

resolver 127.0.0.11 valid=30s;

set $upstream_app nextcloud;

set $upstream_port 443;

set $upstream_proto https;

proxy_pass $upstream_proto://$upstream_app:$upstream_port;

proxy_max_temp_file_size 2048m;

}

}

config.php

<?php

$CONFIG = array (

'memcache.local' => '\\OC\\Memcache\\APCu',

'datadirectory' => '/data',

'instanceid' => 'StringOfLettersAndNumbers',

'trusted_proxies' =>

array (

0 => 'swag',

),

'trusted_domains' =>

array (

0 => 'abc.duckdns.org',

),

'overwrite.cli.url' => 'https://abc.duckdns.org',

'overwritehost' => 'abc.duckdns.org',

'overwriteprotocol' => 'https',

'passwordsalt' => 'LongStringOfLettersAndNumbers',

'secret' => '/LongStringOfLettersAndNumbers',

'dbtype' => 'mysql',

'version' => '19.0.3.1',

'dbname' => 'nextcloud',

'dbhost' => 'nextclouddb',

'dbport' => '',

'dbtableprefix' => 'oc_',

'mysql.utf8mb4' => true,

'dbuser' => 'oc_myname',

'dbpassword' => 'LongStringOfLettersAndNumbers',

'installed' => true,

'mail_smtpmode' => 'smtp',

'mail_smtpsecure' => 'ssl',

'mail_sendmailmode' => 'smtp',

'mail_from_address' => 'myname',

'mail_domain' => 'xxx.net',

'mail_smtpauthtype' => 'LOGIN',

'mail_smtpauth' => 1,

'mail_smtphost' => 'smtp.mail.xxx.net',

'mail_smtpport' => '465',

'mail_smtpname' => 'mickey@mouse.net',

'mail_smtppassword' => 'EmailPassword',

'maintenance' => false,

'theme' => '',

'loglevel' => 2,

);

on the config.php file you only need to concentrate on the small part in the middle:

Code

'trusted_proxies' =>
array (
0 => 'swag',
),
'trusted_domains' =>
array (
0 => 'abc.duckdns.org',
),
'overwrite.cli.url' => 'https://abc.duckdns.org',
'overwritehost' => 'abc.duckdns.org',
'overwriteprotocol' => 'https',

Alles anzeigen

Once logged into Nextcloud, the setup fills in the rest of config.php below this, such as mail info. Also note that the letsencrypt docker has been deprecated. It still works (for now) but swag is the new letsencrypt.

Hope this helps.

Edit: Sorry, I lost all of my indents when I entered the code.

Alles anzeigen

Thank you very much for your help

I will try tomorrow

I'm relatively new to OMV, & Nextcloud. I've successfully installed nextcloud, swag and mariadb via the guide in this thread. I'm running Nextcloud on a subdomain. My external DNS is cloudflare. My nextcloud site is secure running on my external subdomain. I authenticated my domain via cloudflare dns and set the domains to wildcard.

I keep trying to install onlyoffice via the supplemental instructions, but continue to receive a connection refused.

I've read the posts in this thread but continue to have issues. I think I'm getting my reverse proxy wrong. I don't know.

I'm not certain how to proceed with troubleshooting.

I do see that I'm receiving these database error sin the documentserver instance:

"* Starting PostgreSQL 10 database server,
* Error: /usr/lib/postgresql/10/bin/pg_ctl /usr/lib/postgresql/10/bin/pg_ctl start -D /var/lib/postgresql/10/main -l /var/log/postgresql/postgresql-10-main.log -s -o -c config_file="/etc/postgresql/10/main/postgresql.conf" exited with status 1: ,
2020-11-12 01:18:44.727 UTC [234] LOG: could not translate host name "localhost", service "5432" to address: Temporary failure in name resolution,
2020-11-12 01:18:44.727 UTC [234] WARNING: could not create listen socket for "localhost",
2020-11-12 01:18:44.727 UTC [234] FATAL: could not create any TCP/IP sockets,
2020-11-12 01:18:44.727 UTC [234] LOG: database system is shut down,
pg_ctl: could not start server,
Examine the log output.,
...fail!,
* Starting RabbitMQ Messaging Server rabbitmq-server,
...done.,
Waiting for connection to the localhost host on port 5432,"

My stack is as follows:

"

version: "2"

services:

nextcloud:

image: linuxserver/nextcloud

container_name: nextcloud

environment:

- PUID=1000 #change PUID if needed

- PGID=100 #change PGID if needed

- TZ=America/Chicago #change Time Zone if needed

volumes:

- /<mypath>/appdata/nextcloud/config:/config #/srv/dev-disk-by-label-disk1 needs to be adjusted

- /<mypath>/appdata/nextcloud/data:/data #/srv/dev-disk-by-label-disk1 needs to be adjusted

depends_on:

- mariadb

# ports: # uncomment this and the next line if you want to bypass the proxy

# - 450:443

restart: unless-stopped

mariadb:

image: linuxserver/mariadb

container_name: nextclouddb

environment:

- PUID=1000 #change PUID if needed

- PGID=100 #change PGID if needed

- MYSQL_ROOT_PASSWORD= <I set this> #change password

- TZ=America/Chicago #Change Time Zone if needed

volumes:

- /<mypath>/appdata/nextclouddb:/config

# - /<mypath>/appdata/mariadb:/config# /srv/dev-disk-by-label-disk1 needs to be adjusted

restart: unless-stopped

swag:

image: linuxserver/swag #swag is the replacement for letsencrypt (see link below)

container_name: swag

cap_add:

- NET_ADMIN

environment:

- PUID=1000 #change PUID if needed

- PGID=100 #change PGID if needed

- TZ=America/Chicago # change Time Zone if needed

- URL=<I set this> #insert your domain name - yourdomain.url

- SUBDOMAINS=wildcard

- VALIDATION=dns

- DNSPLUGIN=cloudflare #optional

- EMAIL=bruce@acstrat.com # define email; required to renew certificate

- MAXMINDDB_LICENSE_KEY=<I set this>

volumes:

- /<mypath>/appdata/swag:/config #/srv/dev-disk-by-label-disk1 needs to be adjusted

ports:

- 444:443

- 81:80

restart: unless-stopped

onlyofficedocker:

image: onlyoffice/documentserver:latest

container_name: onlyofficedocker

stdin_open: true

restart: always

environment:

- JWT_ENABLED=true

- JWT_SECRET=<I set this> #you will need this in nextcloud after

ports:

- 4433:443

volumes:

- /<mypath>/appdata/onlyoffice/DocumentServer/data/:/var/www/onlyoffice/Data

- /<mypath>/appdata/onlyoffice/DocumentServer/logs:/var/log/onlyoffice

- /<mypath>/appdata/onlyoffice/DocumentServer/lib:/var/lib/onlyoffice

- /<mypath>/appdata/onlyoffice/DocumentServer/db:/var/lib/postgresql

- /<mhypath>/appdata/onlyoffice/DocumentServer/fonts:/usr/share/fonts/truetype/custom

-/<mypath>/appdata/onlyoffice/DocumentServer/forgotten:/var/lib/onlyoffice/documentserver/App_Data/cache/files/forgotten

- /<mypath>/appdata/onlyoffice/DocumentServer/data/:/var/www/onlyoffice/Data onlyoffice/documentserver

I've updated NC to version 20.0.2

Now I get the message that some primary keys are missing and NC suggests to execute the command "occ db:add-missing-primary-keys".

But I have no clue where or how to execute this.

I tried

/srv/dev-disk-by-label-Docker/appdata/nextcloud/config/www/nextcloud# sudo -u www-data php occ db:add-missing-primary-keys

but get the following message:

Zitat

Cannot write into "config" directory! This can usually be fixed by giving the webserver write access to the config directory

Any ideas how to fix this?

docker exec -it nextcloud sudo -u abc php occ db:add-missing-primary-keys

Zitat von Morlan

docker exec -it nextcloud sudo -u abc php occ db:add-missing-primary-keys

--> "Could not open input file: occ"

Try

docker exec -it nextcloud sudo -u abc php /config/www/nextcloud/occ db:add-missing-primary-keys

Alternatively open the console of your nextcloud container within Portainer. Change directory towards /config/www/nextcloud and perform

sudo -u abc php occ db:add-missing-primary-keys

Hi,

I have a question, my Lets Encrpt SSL is going to expire soon, how do i renew this? i cant seem to find a straight forward answer anywhere.

if it dosn't automatically renew: watch this add in the how-to.

Zitat von monsen

Well it seems this does not work with nextcloud 19.0.4 .

Told me that Gallery is not compatible to it.

I was wrong here. It works!

You just have to ignore this message and manually activate the app in the app manager. You have to activate it 2 times. First time you confirm to be working with an incompatible app, second time you really activate it.

I then deactivated the new "photos" app.

Works fine. A lot better than "photos".

Hi! Thank you for this fantastic guide, I finally got it working, and hooked it up with my personal domain (ex. drive.mydomain.net).

But here is the problem, I host this domain on namecheap.com's cpanel. the A record for "mydomain.net" is pointed to their ip. In order for the nextcloud to work, I had to change "mydomain.net"'s A record to my ip. This cause my website to disconnect.

Is there a way for me to keep both my website and nextcloud?

Thank you!

Do you recommend a video or guide to install nextcloud using portainer?