- Nextcloud Server version (e.g., 29.x.x):
- 31.0.6.2
- Operating system and version (e.g., Ubuntu 24.04):
- Ubuntu 24.04 LTS
- Web server and version (e.g, Apache 2.4.25):
- Apache/2.4.58 (Ubuntu)
- PHP version (e.g, 8.3):
- 8.3.6
- Is this the first time you’ve seen this error? (Yes / No):
- Yes
- When did this problem seem to first start?
- Right from the start
- Installation method (e.g. AlO, NCP, Bare Metal/Archive, etc.)
- Hannson IT VM
- Are you using CloudfIare, mod_security, or similar? (Yes / No)
- Not sure
Summary of the issue you are facing:
First time user of NextCloud.
Installed using Hanssen IT VM image on QNAP NAS (TS-464) running in Virtualization Station. Nothing special to report during installation, I used the provided script, everything setup without issues. The only thing I did was add the VMs Ip to allowed hosts so I can access NextCloud on my local LAN, setup port forwarding, and I was able to log in remotely and locally, and change the default port to 40433.
Once I did log in, I noticed the UI was a bit slow, sometimes it would not load completely. I proceeded to use the Android app to backup my photos, this is where the UI issues became problematic. There was a few gigs of photos, several directories etc. Trying to navigate through them on NC Web UI was impossible. Folders would not show up, picture previous on dashboard did not show up, maybe one or two did, never more then that. Going to photos and trying to add the newly uploaded folder would not work, as the folder never showed up, the list of directories under Instant uploads never got populated.
Looking into this further, I stumbled on a whole bunch of errors in apache2 logs, nothing in NC logs that would indicate an issue.
Apache2 logs show vast amounts of errors like this:
[Mon Jun 30 13:48:48.041014 2025] [evasive20:error] [pid 4062757:tid 131051672250048] [remote 192.168.1.1:61697] client denied by server configuration: /var/www/nextcloud/core/preview
The path at the end of that log varies depending on what I click on on the NC toolbar, but it happens for anything I try such as:
/var/www/nextcloud/ocs/v2.php
/var/www/nextcloud/remote.php
/var/www/nextcloud/apps/theming/manifest
/var/www/nextcloud/apps/spreed/img/favicon.ico
Investigating further, many of these paths don’t even exist such as /var/www/nextcloud/core/preview
After hours of googling, I found several dated attempts at fixing this issue, but my version seems to have all of them in place already, so I was not able to even try anything to fix it.
Trying to access the UI via the domain it was setup for results in the same issues, same errors.
This clearly looks like a webserver misconfiguration, but I’m no apache2 expert, and have no idea how to correct it.
Steps to replicate it (hint: details matter!):
- Fresh install
- Upload several photos
- Try to browse in web UI
Log entries
Nextcloud logs
No relevant NC logs are generated
Web Browser
preview:1
GET https://192.168.1.165:40433/core/preview?fileId=110223&x=250&y=250 400 (Bad Request)
favicon.ico:1
GET https://192.168.1.165:40433/core/img/favicon.ico 404 (Not Found)
RecommendedFile.vue:112 could not load recommendation preview
Event {isTrusted: true, type: 'error', target: img, currentTarget: img, eventPhase: 2, …}
whiteboard.svg:1
GET https://192.168.1.165:40433/apps/firstrunwizard/img/apps/whiteboard.svg 404 (Not Found)
avatar:1
GET https://192.168.1.165:40433/ocs/v2.php/apps/spreed/api/v1/room/au3xscm3/avatar?v=aHAjNKSPXH8GZW4E 404 (Not Found)
recognize.svg:1
GET https://192.168.1.165:40433/apps/firstrunwizard/img/apps/recognize.svg 404 (Not Found)
user.svg:1
GET https://192.168.1.165:40433/apps/firstrunwizard/img/user.svg 404 (Not Found)
avatar:1
GET https://192.168.1.165:40433/ocs/v2.php/apps/spreed/api/v1/room/b9ppexgd/avatar?v=ed428f10 404 (Not Found)
tasks.svg:1
GET https://192.168.1.165:40433/apps/firstrunwizard/img/apps/tasks.svg 404 (Not Found)
notifications-dark.svg:1
GET https://192.168.1.165:40433/apps/notifications/img/notifications-dark.svg 404 (Not Found)
app-dark.svg:1
GET https://192.168.1.165:40433/apps/survey_client/img/app-dark.svg 404 (Not Found)
avatar:1
GET https://192.168.1.165:40433/ocs/v2.php/apps/spreed/api/v1/room/ijxmyhyf/avatar?v=E6Y9zdb3izpdmNXT 404 (Not Found)
forms.svg:1
GET https://192.168.1.165:40433/apps/firstrunwizard/img/apps/forms.svg 404 (Not Found)
Web server / Reverse Proxy
[Mon Jun 30 13:38:38.644798 2025] [evasive20:error] [pid 4062757:tid 131051730998976] [remote 192.168.1.1:60815] client denied by server configuration: /var/www/nextcloud/core/preview
[Mon Jun 30 13:38:38.646833 2025] [evasive20:error] [pid 4062757:tid 131051772962496] [remote 192.168.1.1:60815] client denied by server configuration: /var/www/nextcloud/core/preview
[Mon Jun 30 13:38:38.647360 2025] [evasive20:error] [pid 4062757:tid 131051672250048] [remote 192.168.1.1:60815] client denied by server configuration: /var/www/nextcloud/core/preview
[Mon Jun 30 13:38:38.813249 2025] [evasive20:error] [pid 4062757:tid 131051588224704] [remote 192.168.1.1:60815] client denied by server configuration: /var/www/nextcloud/core/preview
[Mon Jun 30 13:38:39.448489 2025] [evasive20:error] [pid 4062757:tid 131051663857344] [remote 192.168.1.1:60815] client denied by server configuration: /var/www/nextcloud/remote.php
[Mon Jun 30 13:38:54.301953 2025] [evasive20:error] [pid 4062757:tid 131051596633792] [remote 192.168.1.1:60838] client denied by server configuration: /var/www/nextcloud/core/preview
[Mon Jun 30 13:38:54.306211 2025] [evasive20:error] [pid 4062757:tid 131051722606272] [remote 192.168.1.1:60838] client denied by server configuration: /var/www/nextcloud/core/preview
[Mon Jun 30 13:38:54.308250 2025] [evasive20:error] [pid 4062757:tid 131051638679232] [remote 192.168.1.1:60838] client denied by server configuration: /var/www/nextcloud/core/preview
[Mon Jun 30 13:38:54.436982 2025] [evasive20:error] [pid 4062757:tid 131050088937152] [remote 192.168.1.1:60838] client denied by server configuration: /var/www/nextcloud/core/preview
[Mon Jun 30 13:38:55.249000 2025] [evasive20:error] [pid 4062757:tid 131049677891264] [remote 192.168.1.1:60838] client denied by server configuration: /var/www/nextcloud/remote.php
[Mon Jun 30 13:39:02.705571 2025] [evasive20:error] [pid 4062757:tid 131051680642752] [remote 192.168.1.1:60847] client denied by server configuration: /var/www/nextcloud/
[Mon Jun 30 13:39:02.857822 2025] [evasive20:error] [pid 4062757:tid 131051579815616] [remote 192.168.1.1:60847] client denied by server configuration: /var/www/nextcloud/apps/dashboard/
[Mon Jun 30 13:39:03.138883 2025] [evasive20:error] [pid 4062757:tid 131051689035456] [remote 192.168.1.1:60847] client denied by server configuration: /var/www/nextcloud/apps/dashboard/css/dashboard.css
[Mon Jun 30 13:39:03.261635 2025] [evasive20:error] [pid 4062757:tid 131050105722560] [remote 192.168.1.1:60847] client denied by server configuration: /var/www/nextcloud/dist/dashboard-main.js
[Mon Jun 30 13:39:03.262101 2025] [evasive20:error] [pid 4062757:tid 131051747784384] [remote 192.168.1.1:60847] client denied by server configuration: /var/www/nextcloud/apps/deck/js/deck-dashboard.js
[Mon Jun 30 13:39:03.263959 2025] [evasive20:error] [pid 4062757:tid 131051605042880] [remote 192.168.1.1:60847] client denied by server configuration: /var/www/nextcloud/apps/recommendations/js/recommendations-dashboard.js
[Mon Jun 30 13:39:03.265553 2025] [evasive20:error] [pid 4062757:tid 131050080544448] [remote 192.168.1.1:60847] client denied by server configuration: /var/www/nextcloud/apps/photos/js/photos-dashboard.js
[Mon Jun 30 13:39:03.266334 2025] [evasive20:error] [pid 4062757:tid 131050097329856] [remote 192.168.1.1:60847] client denied by server configuration: /var/www/nextcloud/dist/weather_status-weather-status.js
[Mon Jun 30 13:39:03.272487 2025] [evasive20:error] [pid 4062757:tid 131049703069376] [remote 192.168.1.1:60847] client denied by server configuration: /var/www/nextcloud/apps/notes/js/notes-dashboard.js
[Mon Jun 30 13:39:03.651001 2025] [evasive20:error] [pid 4062757:tid 131049694676672] [remote 192.168.1.1:60847] client denied by server configuration: /var/www/nextcloud/ocs/v2.php
[Mon Jun 30 13:39:03.673733 2025] [evasive20:error] [pid 4062757:tid 131051621861056] [remote 192.168.1.1:60847] client denied by server configuration: /var/www/nextcloud/ocs/v2.php
[Mon Jun 30 13:39:03.838127 2025] [evasive20:error] [pid 4062757:tid 131051764569792] [remote 192.168.1.1:60847] client denied by server configuration: /var/www/nextcloud/ocs/v2.php
[Mon Jun 30 13:39:14.535481 2025] [evasive20:error] [pid 4062756:tid 131051630270144] [remote 192.168.1.1:60861] client denied by server configuration: /var/www/nextcloud/ocs/v2.php
[Mon Jun 30 13:39:14.640705 2025] [evasive20:error] [pid 4062756:tid 131051638679232] [remote 192.168.1.1:60861] client denied by server configuration: /var/www/nextcloud/ocs/v2.php
[Mon Jun 30 13:39:14.847591 2025] [evasive20:error] [pid 4062756:tid 131051663857344] [remote 192.168.1.1:60861] client denied by server configuration: /var/www/nextcloud/ocs/v2.php
[Mon Jun 30 13:39:14.848379 2025] [evasive20:error] [pid 4062756:tid 131051747784384] [remote 192.168.1.1:60861] client denied by server configuration: /var/www/nextcloud/ocs/v2.php
[Mon Jun 30 13:39:14.851332 2025] [evasive20:error] [pid 4062756:tid 131051630270144] [remote 192.168.1.1:60861] client denied by server configuration: /var/www/nextcloud/ocs/v2.php
[Mon Jun 30 13:39:15.238644 2025] [evasive20:error] [pid 4062756:tid 131051764569792] [remote 192.168.1.1:60861] client denied by server configuration: /var/www/nextcloud/core/preview
[Mon Jun 30 13:39:19.678650 2025] [evasive20:error] [pid 4062756:tid 131051756177088] [remote 192.168.1.1:60861] client denied by server configuration: /var/www/nextcloud/apps/spreed/
[Mon Jun 30 13:39:20.056924 2025] [evasive20:error] [pid 4062756:tid 131050072151744] [remote 192.168.1.1:60861] client denied by server configuration: /var/www/nextcloud/apps/spreed/js/talk-collections.js
[Mon Jun 30 13:39:20.057310 2025] [evasive20:error] [pid 4062756:tid 131050097329856] [remote 192.168.1.1:60861] client denied by server configuration: /var/www/nextcloud/apps/deck/js/deck-collections.js
[Mon Jun 30 13:39:20.058036 2025] [evasive20:error] [pid 4062756:tid 131050046973632] [remote 192.168.1.1:60861] client denied by server configuration: /var/www/nextcloud/apps/spreed/js/talk-main.js
[Mon Jun 30 13:39:20.058922 2025] [evasive20:error] [pid 4062756:tid 131051772962496] [remote 192.168.1.1:60861] client denied by server configuration: /var/www/nextcloud/dist/files_sharing-collaboration.js
[Mon Jun 30 13:39:20.060717 2025] [evasive20:error] [pid 4062756:tid 131050038580928] [remote 192.168.1.1:60861] client denied by server configuration: /var/www/nextcloud/apps/deck/js/deck-talk.js
[Mon Jun 30 13:39:20.561954 2025] [evasive20:error] [pid 4062756:tid 131051647071936] [remote 192.168.1.1:60861] client denied by server configuration: /var/www/nextcloud/ocs/v2.php
[Mon Jun 30 13:39:20.581882 2025] [evasive20:error] [pid 4062756:tid 131051739391680] [remote 192.168.1.1:60861] client denied by server configuration: /var/www/nextcloud/ocs/v2.php
[Mon Jun 30 13:39:20.710625 2025] [evasive20:error] [pid 4062756:tid 131051621861056] [remote 192.168.1.1:60861] client denied by server configuration: /var/www/nextcloud/ocs/v2.php
[Mon Jun 30 13:39:20.717422 2025] [evasive20:error] [pid 4062756:tid 131051605042880] [remote 192.168.1.1:60861] client denied by server configuration: /var/www/nextcloud/apps/theming/manifest
[Mon Jun 30 13:39:20.719945 2025] [evasive20:error] [pid 4062756:tid 131051689035456] [remote 192.168.1.1:60861] client denied by server configuration: /var/www/nextcloud/apps/spreed/img/favicon.ico
[Mon Jun 30 13:39:24.957794 2025] [evasive20:error] [pid 4062756:tid 131051655464640] [remote 192.168.1.1:60861] client denied by server configuration: /var/www/nextcloud/apps/dashboard/
[Mon Jun 30 13:39:25.651812 2025] [evasive20:error] [pid 4062756:tid 131051672250048] [remote 192.168.1.1:60861] client denied by server configuration: /var/www/nextcloud/ocs/v2.php
[Mon Jun 30 13:39:25.770616 2025] [evasive20:error] [pid 4062756:tid 131051697428160] [remote 192.168.1.1:60861] client denied by server configuration: /var/www/nextcloud/remote.php
[Mon Jun 30 13:39:25.958926 2025] [evasive20:error] [pid 4062756:tid 131051579815616] [remote 192.168.1.1:60861] client denied by server configuration: /var/www/nextcloud/ocs/v2.php
[Mon Jun 30 13:39:26.055748 2025] [evasive20:error] [pid 4062756:tid 131051705820864] [remote 192.168.1.1:60861] client denied by server configuration: /var/www/nextcloud/ocs/v2.php
[Mon Jun 30 13:39:26.077000 2025] [evasive20:error] [pid 4062756:tid 131051722606272] [remote 192.168.1.1:60861] client denied by server configuration: /var/www/nextcloud/ocs/v2.php
[Mon Jun 30 13:39:26.112783 2025] [evasive20:error] [pid 4062756:tid 131051781355200] [remote 192.168.1.1:60861] client denied by server configuration: /var/www/nextcloud/remote.php
[Mon Jun 30 13:39:26.250591 2025] [evasive20:error] [pid 4062756:tid 131051596633792] [remote 192.168.1.1:60861] client denied by server configuration: /var/www/nextcloud/ocs/v2.php
[Mon Jun 30 13:48:47.878616 2025] [evasive20:error] [pid 4062757:tid 131051647071936] [remote 192.168.1.1:61697] client denied by server configuration: /var/www/nextcloud/ocs/v2.php
Configuration
Nextcloud
{
"system": {
"passwordsalt": "***REMOVED SENSITIVE VALUE***",
"secret": "***REMOVED SENSITIVE VALUE***",
"trusted_domains": [
"localhost",
"192.168.1.119",
"***REMOVED SENSITIVE VALUE***",
"***REMOVED SENSITIVE VALUE***",
"192.168.1.214",
"192.168.1.1",
"192.168.1.165"
],
"datadirectory": "***REMOVED SENSITIVE VALUE***",
"dbtype": "pgsql",
"version": "31.0.6.2",
"overwrite.cli.url": "***REMOVED SENSITIVE VALUE***",
"dbname": "***REMOVED SENSITIVE VALUE***",
"dbhost": "***REMOVED SENSITIVE VALUE***",
"dbport": "",
"dbtableprefix": "oc_",
"dbuser": "***REMOVED SENSITIVE VALUE***",
"dbpassword": "***REMOVED SENSITIVE VALUE***",
"installed": true,
"instanceid": "***REMOVED SENSITIVE VALUE***",
"redis": {
"host": "***REMOVED SENSITIVE VALUE***",
"port": "0",
"dbindex": "0",
"timeout": "0.5",
"password": "***REMOVED SENSITIVE VALUE***"
},
"memcache.local": "\\OC\\Memcache\\Redis",
"filelocking.enabled": "true",
"memcache.distributed": "\\OC\\Memcache\\Redis",
"memcache.locking": "\\OC\\Memcache\\Redis",
"upgrade.disable-web": true,
"log_type": "file",
"logfile": "\/var\/log\/nextcloud\/nextcloud.log",
"loglevel": "2",
"log.condition": {
"apps": [
"admin_audit"
]
},
"maintenance_window_start": 2,
"mail_smtpmode": "smtp",
"remember_login_cookie_lifetime": "1800",
"log_rotate_size": "10485760",
"trashbin_retention_obligation": "auto, 60",
"versions_retention_obligation": "auto, 180",
"activity_expire_days": "120",
"simpleSignUpLink.shown": false,
"default_phone_region": "us",
"logtimezone": "America\/Toronto",
"htaccess.RewriteBase": "\/",
"preview_concurrency_new": "4",
"preview_concurrency_all": "8",
"enabledPreviewProviders": [
"OC\\Preview\\Imaginary",
"OC\\Preview\\Image",
"OC\\Preview\\MarkDown",
"OC\\Preview\\MP3",
"OC\\Preview\\TXT",
"OC\\Preview\\OpenDocument",
"OC\\Preview\\Movie",
"OC\\Preview\\Krita",
"OC\\Preview\\ImaginaryPDF"
],
"preview_imaginary_url": "***REMOVED SENSITIVE VALUE***",
"preview_max_x": 2048,
"preview_max_y": 2048,
"preview_max_memory": "256",
"preview_format": "webp",
"maintenance": false,
"memories.db.triggers.fcu": true,
"memories.exiftool": "\/var\/www\/nextcloud\/apps\/memories\/bin-ext\/exiftool-amd64-glibc",
"memories.vod.path": "\/var\/www\/nextcloud\/apps\/memories\/bin-ext\/go-vod-amd64",
"memories.vod.ffmpeg": "\/usr\/bin\/ffmpeg",
"memories.vod.ffprobe": "\/usr\/bin\/ffprobe"
}
}
Apps
Enabled:
- activity: 4.0.0
- admin_audit: 1.21.0
- app_api: 5.0.2
- bruteforcesettings: 4.0.0
- calendar: 5.3.4
- circles: 31.0.0
- cloud_federation_api: 1.14.0
- comments: 1.21.0
- contacts: 7.1.3
- contactsinteraction: 1.12.0
- dashboard: 7.11.0
- dav: 1.33.0
- deck: 1.15.1
- federatedfilesharing: 1.21.0
- federation: 1.21.0
- files: 2.3.1
- files_downloadlimit: 4.0.0
- files_pdfviewer: 4.0.0
- files_reminders: 1.4.0
- files_sharing: 1.23.1
- files_trashbin: 1.21.0
- files_versions: 1.24.0
- firstrunwizard: 4.0.0
- groupfolders: 19.1.1
- logreader: 4.0.0
- lookup_server_connector: 1.19.0
- mail: 5.1.5
- memories: 7.5.2
- nextcloud_announcements: 3.0.0
- notes: 4.12.1
- notifications: 4.0.0
- oauth2: 1.19.1
- password_policy: 3.0.0
- photos: 4.0.0-dev.1
- privacy: 3.0.0
- profile: 1.0.0
- provisioning_api: 1.21.0
- recommendations: 4.0.0
- related_resources: 2.0.0
- serverinfo: 3.0.0
- settings: 1.14.0
- sharebymail: 1.21.0
- spreed: 21.1.0
- support: 3.0.0
- survey_client: 3.0.0
- systemtags: 1.21.1
- text: 5.0.0
- theming: 2.6.1
- twofactor_backupcodes: 1.20.0
- updatenotification: 1.21.0
- user_status: 1.11.0
- viewer: 4.0.0
- weather_status: 1.11.0
- webhook_listeners: 1.2.0
- workflowengine: 2.13.0
Disabled:
- encryption: 2.19.0
- extract: 1.3.6
- files_external: 1.23.0
- issuetemplate: 0.7.0 (installed 0.7.0)
- suspicious_login: 9.0.1
- twofactor_nextcloud_notification: 5.0.0
- twofactor_totp: 13.0.0-dev.0
- user_ldap: 1.22.0