Caddy (reverse proxy) plugin + Nextcloud AIO

[fforstik]

Hello

For couple of weeks im trying to install Nextcloud AIO but still having issues to get the login page after i enter my domain. Its just blank page, but I got valid Letsencrypt certificate.

In opnsense Im using Caddy plugin as a reverse proxy for Nextcloud which is installed on Windows 11 with docker.  Caddy is using recommended config on nextcloud with reverse proxy. As a DNS im using Nextdns.

Caddy config:


I have tried different browser or different device and the same...

I see that Im hitting the Nextcloud AIO as I see this from CAddy reverse proxy lo


I hope you will be able to help me as I have tried multiple Caddy settings.

Thank you

[Monviech (Cedrik)]

Can you open the Nextcloud without the reverse proxy?

[fforstik]

Yes, I can open Nextcloud login page on local server:11000

I have installed nginx plugin and configured the reverse proxy exactly as this: https://forum.opnsense.org/index.php?topic=19305.0

and I can access it even on my domain and externally as well..

There must be some issue with the Caddy config which I have missed... I hope some =one can point me to the right direction.

Caddy:

[Monviech (Cedrik)]

Why did you check TLS in the handler? Disable it and try again.

http://localserver:11000   -> None of the tls options in handler checked.
https://localserver:11000   -> TLS insecure skip verify in handler checked.

[fforstik]

Unchecked:  TLS Insecure Skip Verify
Unchecked: TLS

and the same problem

[Monviech (Cedrik)]

Well then try to check "TLS Insecure Skip Verify".

[fforstik]

same.. I was playing with the TLS earlier like:

Unchecked:  TLS Insecure Skip Verify
Unchecked: TLS

checked:  TLS Insecure Skip Verify
Unchecked: TLS

Unchecked:  TLS Insecure Skip Verify
checked: TLS

checked:  TLS Insecure Skip Verify
checked: TLS


But the same issue

[fforstik]

the domain name is: subdomain.domainname

I have tried to setup also as domain = domain
and create subdomain and use it in the handler

but it was the same issue..

[Monviech (Cedrik)]

There must be some sort of deeper issue at hand that I probably can't troubleshoot in the scope of this forum.

Try to reverse proxy some other stuff to get a feel for it to see if you can get other things to work.

Try to reverse proxy the OPNsense WebGUI as a start. It's written in the documentation how to do that.

[fforstik]

I have done that based on the configuration https://docs.opnsense.org/manual/how-tos/caddy.html

and still nothing...

Im just wondering if the Caddy plugin works in general :-)

[Monviech (Cedrik)]

Yes the plugin works. A lot of people including myself use it.

It might be a nextcloud misconfiguration, or your infrastructure is set up incorrectly.

Here is an example what Nextcloud needs to be reverse proxied, "trusted proxies" defined.

https://docs.nextcloud.com/server/latest/admin_manual/configuration_server/reverse_proxy_configuration.html#defining-trusted-proxies

[fforstik]

i will try once more, but its interesting that nginx works like a charm without additional afford and Caddy based on the guide doesnt work.
    - It doesnt seems like Opnsense misconfiguration

[Monviech (Cedrik)]

I have actually sat down, created a Windows 10 VM, installed the Nextcloud AIO in it with this setup guide:

https://nextcloud.com/blog/your-guide-to-the-nextcloud-all-in-one-on-windows-10-11/

Then I noticed that I had to also follow this guide:

https://github.com/nextcloud/all-in-one/blob/main/reverse-proxy.md#2-use-this-startup-command

Then I noticed how broken and overdesigned this whole thing is.

Good luck if you want to use that and trust it with your data.

Even the Nextcloud SNAP in Ubuntu would be a better choice than using this.


Just look at discussions like these: https://github.com/nextcloud/all-in-one/issues/4001

They go against conventions and are proud of it, it seems. Francis is one of the main Caddy contributers btw.

[fforstik]

Thank.. yes. thats the similar what I have used.. I have also posted on Nextcloud forum where I have listed my config as well..
https://help.nextcloud.com/t/nextclou-aio-install-caddy-reverse-proxy-opnsense-white-login-page/200032/6

Anyway, tried modify the URL handle and still doesnt work..
  - also trie based on the Opnsense giude setup reverse proxy for Opnsense admin GUI portal and doesnt work either..

[Monviech (Cedrik)]

Hmm, at least reverse proxying the Webgui should always work.

Here I even made a small video:

https://www.youtube.com/watch?v=6ip8Sx4zcDA

I used a clean new installed 24.7 in that video. So I /know/ it should work.