Next cloud OMV5 RPI

cmmc01988 · 10. Juni 2021

Hi,

I have tried to follow this guide but can't seem to get anything to work! My router GUI uses port 80 and 443 so I tried to change those.

Whenever I go to my url I see my routers login page and can't get to nextcloud . The error I see when I run docker logs -f swag is:

Code

Hint: The Certificate Authority couldn't exterally verify that the standalone plugin completed the required http-01 challenges. Ensure the plugin is configured correctly and that the changes it makes are accessible from the internet.

Saving debug log to /var/log/letsencrypt/letsencrypt.log
Some challenges have failed.
Ask for help or search for solutions at https://community.letsencrypt.org. See the logfile /var/log/letsencrypt/letsencrypt.log or re-run Certbot with -v for more details.
ERROR: Cert does not exist! Please see the validation error above. The issue may be due to incorrect dns or port forwarding settings. Please fix your settings and recreate the container

I have no idea how to fix this or if this is even my main problem

KM0201 · 10. Juni 2021

Reply here, click the "code" button, and inside the code box, paste your docker-compose/stack file. Edit out any personal info (passwords, domain names, email addresses)..

It sounds like you have a DNS issue if you're getting your router login page.

macom · 10. Juni 2021

Zitat von cmmc01988

The issue may be due to incorrect dns or port forwarding settings. Please fix your settings and recreate the container

Also check this link (also available in the guide)

https://blog.linuxserver.io/20…t-mapping-and-forwarding/

cmmc01988 · 11. Juni 2021

I think it is my ports . I know my router doesn't allow 80 or 443 bcause they are used by the gui. I thought i'd opened ports 81 and 444

Code

version: "2"
services:
  nextcloud:
    image: ghcr.io/linuxserver/nextcloud
    container_name: nextcloud
    environment:
      - PUID=1000 
      - PGID=100  
      - TZ=Europe/London 
    volumes:
      - /srv/dev-disk-by-uuid-20A00CCAA00CA7FC/Appdata/appdata/nextcloud/config:/config 
      - /srv/dev-disk-by-uuid-20A00CCAA00CA7FC/Appdata/appdata/nextcloud/data:/data     
    depends_on:
      - mariadb
    ports:  
     - 450:443
    restart: unless-stopped
  mariadb:
    image: ghcr.io/linuxserver/mariadb
    container_name: nextclouddb
    environment:
      - PUID=1000 
      - PGID=100  
      - MYSQL_ROOT_PASSWORD=MYPASSWORD
      - TZ=Europe/London
    volumes:
      - /srv/dev-disk-by-uuid-20A00CCAA00CA7FC/Appdata/appdata/nextclouddb:/config
    restart: unless-stopped
  swag:
    image: linuxserver/swag         
    container_name: swag
    cap_add:
      - NET_ADMIN
    environment:
      - PUID=1000 #change PUID if needed
      - PGID=100  #change PGID if needed
      - TZ=Europe/London
      - URL=MYDOMAIN.duckdns.org
      - SUBDOMAINS=
      - VALIDATION=http
      - EMAIL=MYEMAIL
    volumes:
      - /srv/dev-disk-by-uuid-20A00CCAA00CA7FC/Appdata/appdata/swag:/config
    ports:
      - 444:443
      - 81:80
    restart: unless-stopped

Alles anzeigen

Soma · 11. Juni 2021

Zitat von cmmc01988

I think it is my ports . I know my router doesn't allow 80 or 443 bcause they are used by the gui. I thought i'd opened ports 81 and 444

Which Router do you have? Never heard/saw a Router access page using port 80/443.

Although some FritzBoxes need some permissions to allow the portforwarding for the service of http/https.

And the portforwarding is from External 80 to Internal 81 and the same for 443 to 444.

Also, there's some snags on your YML.

If you have a duckdns, it's better to change the auth and you need some "SUBDOMAINS".

Also, be sure that your DUCKDNS is constantly updated.

Try this YML:

Code

version: "2"
services:
  nextcloud:
    image: ghcr.io/linuxserver/nextcloud:latest #<<- To prevent Portainer DL all images (been happening)
    container_name: nextcloud
    environment:
      - PUID=1000
      - PGID=100
      - TZ=Europe/London
    volumes:
      - /srv/dev-disk-by-uuid-20A00CCAA00CA7FC/Appdata/appdata/nextcloud/config:/config
      - /srv/dev-disk-by-uuid-20A00CCAA00CA7FC/Appdata/appdata/nextcloud/data:/data
    depends_on:
      - mariadb
    ports:
     - 450:443
    restart: unless-stopped
  mariadb:
    image: ghcr.io/linuxserver/mariadb:alpine #<<-- Instead of Bionic. Prevents issues with Nextcloud v21
    container_name: nextclouddb
    environment:
      - PUID=1000
      - PGID=100
      - MYSQL_ROOT_PASSWORD=MYPASSWORD
      - TZ=Europe/London
    volumes:
      - /srv/dev-disk-by-uuid-20A00CCAA00CA7FC/Appdata/appdata/nextclouddb:/config
    restart: unless-stopped
  swag:
    image: linuxserver/swag:latest #<<-- To prevent Portainer DL all images (been happening)
    container_name: swag
    cap_add:
      - NET_ADMIN
    environment:
      - PUID=1000 #change PUID if needed
      - PGID=100  #change PGID if needed
      - TZ=Europe/London
      - URL=MYDOMAIN.duckdns.org
      - SUBDOMAINS=wildcard #<<-- All containers will have a cert
      - VALIDATION=duckdns
      - DUCKDNSTOKEN=yourTOKENfromDUCKDNS
      - EMAIL=MYEMAIL
    volumes:
      - /srv/dev-disk-by-uuid-20A00CCAA00CA7FC/Appdata/appdata/swag:/config
    ports:
      - 444:443
      - 81:80
    restart: unless-stopped

Alles anzeigen

As for the update of DUCKDNS, see how to do it on their page:

https://www.duckdns.org/install.jsp#linux-cron

cmmc01988 · 11. Juni 2021

Thanks Soma, Everything in docker seems to be running now but I still cant access nextcloud localy or externally?

My router is a Huawei DG8041W

Soma · 11. Juni 2021

You should be able to access Nextcloud locally with https:\\IPofTHEpi:450

As for the external access, I can't find any info on that specific model but in general, Huawei Routers allow to forward ports.

See here if it's similar to yours:

Fastest Huawei DR814 Router Port Forwarding

cmmc01988 · 11. Juni 2021

All I see is:

400 Bad Request

The plain HTTP request was sent to HTTPS portnginx/1.18.0

Soma · 11. Juni 2021

Can you post your:

SWAG logs (hide your sensible data)

How are you accessing Nextcloud? Via subdomain or subfolder?

Post you config.php of nextcloud (hide the sensible data)

cmmc01988 · 11. Juni 2021

I tried to access nextcloud locally with https:\\IPofTHEpi:450

Code

[s6-init] making user provided files available at /var/run/s6/etc...exited 0.,
[s6-init] ensuring user provided files have correct perms...exited 0.,
[fix-attrs.d] applying ownership & permissions fixes...,
[fix-attrs.d] done.,
[cont-init.d] executing container initialization scripts...,
[cont-init.d] 01-envfile: executing... ,
[cont-init.d] 01-envfile: exited 0.,
[cont-init.d] 10-adduser: executing... ,
usermod: warning: /var/mail/abc not owned by abc,
,
-------------------------------------,
          _         (),
         | |  ___   _    __,
         | | / __| | |  /  \ ,
         | | \__ \ | | | () |,
         |_| |___/ |_|  \__/,
,
,
Brought to you by linuxserver.io,
-------------------------------------,
,
To support the app dev(s) visit:,
Certbot: https://supporters.eff.org/donate/support-work-on-certbot,
,
To support LSIO projects visit:,
https://www.linuxserver.io/donate/,
-------------------------------------,
GID/UID,
-------------------------------------,
,
User uid:    1000,
User gid:    100,
-------------------------------------,
,
[cont-init.d] 10-adduser: exited 0.,
[cont-init.d] 20-config: executing... ,
[cont-init.d] 20-config: exited 0.,
[cont-init.d] 30-keygen: executing... ,
using keys found in /config/keys,
[cont-init.d] 30-keygen: exited 0.,
[cont-init.d] 50-config: executing... ,
Variables set:,,
0,
PGID=100,
TZ=Europe/London,
URL=########.duckdns.org,
SUBDOMAINS=wildcard,
EXTRA_DOMAINS=,
ONLY_SUBDOMAINS=false,
VALIDATION=duckdns,
CERTPROVIDER=,
DNSPLUGIN=,
AIL=email@email.com,
STAGING=,
,
Using Let's Encrypt as the cert provider,
SUBDOMAINS entered, processing,
Wildcard cert for ######.duckdns.org will be requested,
E-mail address entered: #######,
duckdns validation is selected,
the resulting certificate will only cover the subdomains due to a limitation of duckdns, so it is advised to set the root location to use www.subdomain.duckdns.org,
Certificate exists; parameters unchanged; starting nginx,
Starting 2019/12/30, GeoIP2 databases require personal license key to download. Please retrieve a free license key from MaxMind,,
and add a new env variable "MAXMINDDB_LICENSE_KEY", set to your license key.,
[cont-init.d] 50-config: exited 0.,
[cont-init.d] 60-renew: executing... ,
The cert does not expire within the next day. Letting the cron script handle the renewal attempts overnight (2:08am).,
[cont-init.d] 60-renew: exited 0.,
[cont-init.d] 70-templates: executing... ,
[cont-init.d] 70-templates: exited 0.,
[cont-init.d] 99-custom-files: executing... ,
[custom-init] no custom files found exiting...,
[cont-init.d] 99-custom-files: exited 0.,
[cont-init.d] done.,
[services.d] starting services,
[services.d] done.,
Server ready,

Alles anzeigen

Soma · 11. Juni 2021

The SWAG is working fine.

Acessing Nextcloud via internal IP can be done without SWAG (that is why on the YML part of Nextcloud, the port is set to "450")

You have to open a browser on another computer on the same network and put the INTERNAL IP of your server (in this case, the internal IP of your Pi, something like https://192.168.x.x:450 Change the x to the proper numbers)

Click on "Advance" and then there's a "Proceed anyway"

But you didn't answered the other questions.

If you follow the guide without deviate, you'll access EXTERNALLY with something as https://www.YOURDOMAIN.duckdns.org/nextcloud

After first login, then you can change to something as: https://nextcloud.YOURDOMAIN.duckdns.org

cmmc01988 · 11. Juni 2021

I am on a different computer on the same network but I get this:

Soma · 11. Juni 2021

Have you done the configuration of the proxy part of the guide already?

Zitat
Configuration of proxy

cd /srv/dev-disk-by-label-disk1/appdata/swag/nginx/proxy-confs /srv/dev-disk-by-label-disk1 has to be adjusted
cp nextcloud.subfolder.conf.sample nextcloud.subfolder.conf this will copy the sample configuration file for nextcloud and removes the .sample so that the file will become active
nano /srv/dev-disk-by-label-disk1/appdata/nextcloud/config/www/nextcloud/config/config.php and insert the text from the box below at the end, but befor the ");" - change "your.url" to your domain
Code
Code
'trusted_proxies' =>   array (
    0 => 'swag',
  ),
  'overwritewebroot' => '/nextcloud',
  'overwrite.cli.url' => 'https://your.url/nextcloud',
  'trusted_domains' =>   array (
    0 => 'your.url:443',
  ),
docker restart swag to restart the swag container
docker logs -f swag to check for errors
docker restart nextcloud

cmmc01988 · 11. Juni 2021

I've made sure the proxy config is there and SWAG appears to be running fine. I can't find a nextcloud config that actually contains data though?

Soma · 12. Juni 2021

Zitat von cmmc01988

I can't find a nextcloud config that actually contains data though?

As stated in @macom Guide (in your case will be):

nano /srv/dev-disk-by-uuid-20A00CCAA00CA7FC/Appdata/appdata/nextcloud/config/www/nextcloud/config/config.php

Post it here in a "Code Box" but hide sensible data

cmmc01988 · 12. Juni 2021

Thanks, here's whats in my config file

PHP

<?php
$CONFIG = array (
  'memcache.local' => '\OC\Memcache\APCu',
  'datadirectory' => '/data',
  );
'trusted_proxies' =>   array (
    0 => 'swag',
  ),
  'overwritewebroot' => '/nextcloud',
  'overwrite.cli.url' => 'https://###################/nextcloud',
  'trusted_domains' =>   array (
    0 => 'your.url:443',
  ),

Alles anzeigen

Soma · 13. Juni 2021

Zitat von cmmc01988

Thanks, here's whats in my config file

You need to edit it (there's errors on the commas and semi-commas):

PHP

<?php
$CONFIG = array (
  'memcache.local' => '\OC\Memcache\APCu',
  'datadirectory' => '/data',
'trusted_proxies' =>   array (
    0 => 'swag',
  ),
  'overwritewebroot' => '/nextcloud',
  'overwrite.cli.url' => 'https://###################/nextcloud',
  'trusted_domains' =>   array (
    0 => 'yourINTERNALip:450',
    1 => 'https://###################',
  ),  
);

Alles anzeigen

And you also should have previously renamed the subfolder file (in your case):

cd /srv/dev-disk-by-uuid-20A00CCAA00CA7FC/Appdata/appdata/swag/nginx/proxy-confs/

cp nextcloud.subfolder.conf.sample nextcloud.subfolder.conf

Then restart swag and Nextcloud and you should be able to, at least, access it via Internal IP.

cmmc01988 · 13. Juni 2021

Ok so now I'm getting:

Code

Internal Server Error

The server encountered an internal error and was unable to complete your request.
Please contact the server administrator if this error reappears multiple times, please include the technical details below in your report.
More details can be found in the webserver log.

via internal IP and the router login page via my domain . Is there a way to remove everything and start again?

Soma · 14. Juni 2021

Zitat von cmmc01988

Is there a way to remove everything and start again?

You can delete all the folders there are/were created from the stack and just redeploy again and they will be recreated.

cmmc01988 · 14. Juni 2021

I've found the error log and its showign this:

Code

[tt]2021/06/13 21:52:02 [error] 388#388: *2 FastCGI sent in stderr: "PHP message: PHP Parse error:  syntax error, unexpected '=&gt;' (T_DOUBLE_ARROW) in /config/www/nextcloud/config/config.php on line 53" while reading upstream, client: 192.168.1.11, server: _, request: "GET / HTTP/2.0", upstream: "fastcgi://127.0.0.1:9000", host: "192.168.1.24:450"
2021/06/13 21:52:02 [error] 388#388: *2 FastCGI sent in stderr: "PHP message: PHP Parse error:  syntax error, unexpected '=&gt;' (T_DOUBLE_ARROW) in /config/www/nextcloud/config/config.php on line 53" while reading upstream, client: 192.168.1.11, server: _, request: "GET /favicon.ico HTTP/2.0", upstream: "fastcgi://127.0.0.1:9000", host: "192.168.1.24:450"

I also found a different config file to before?

PHP

<?php
$CONFIG = array (
'instanceid' => '',
'passwordsalt' => '',
'secret' => '',
'trusted_domains' =>
array (
  0 => '192.168.1.24',
  1 => '######.duckdns.org',
),
'datadirectory' => '/srv/dev-disk-by-uuid-20A00CCAA00CA7FC/Appdata',
'dbtype' => 'mariadb',
'version' => '17.0.1.1',
'overwrite.cli.url' => 'http://####.duckdns.org',
'dbname' => 'nextclouddb',
'dbhost' => 'localhost',
'dbport' => '',
'dbtableprefix' => '',
'mysql.utf8mb4' => true,
'dbuser' => 'Craig',
'dbpassword' => '####',
'installed' => true,
'htaccess.RewriteBase' => '/',
'twofactor_enforced' => 'false',
'twofactor_enforced_groups' =>
array (
  0 => 'admin',
),
'twofactor_enforced_excluded_groups' =>
array (
),

'mail_smtpmode' => 'smtp',
'mail_smtpsecure' => 'ssl',
'mail_sendmailmode' => 'smtp',
'mail_from_address' => 'CONFIDENTIAL',
'mail_domain' => '???',
'mail_smtpauthtype' => 'LOGIN',
'mail_smtpauth' => 1,
'mail_smtphost' => 'CONFIDENTIAL',
'mail_smtpport' => 'CONFIDENTIAL',
'mail_smtpname' => 'CONFIDENTIAL',
'mail_smtppassword' => 'CONFIDENTIAL',
'maintenance' => false,
'updater.secret' => 'CONFIDENTIAL',
'memcache.local' => '\\OC\\Memcache\\APCu',
'theme' => '',
'loglevel' => 2,
'overwriteprotocol' => 'https'
);

'trusted_proxies' =>   array (
    0 => 'swag',
  ),
  'overwritewebroot' => '/nextcloud',
  'overwrite.cli.url' => 'https://####.duckdns.org/nextcloud',
  'trusted_domains' =>   array (
    0 => '192.168.1.24:443',
  ),

Alles anzeigen

Next cloud OMV5 RPI

400 Bad Request

Jetzt mitmachen!

Ähnliche Themen

Nextcloud with Letsencrypt using OMV and docker-compose - Q&A

OMV5 mit Docker und NextCloud Speicher

Nextcloud - security and setup warnings

Connect to OMV GUI via https and DuckDNS

nextcloud omv5

Nextcloud - External storage mount issue