AIO Docker cant connect to itself with Caddy Reverse Proxy on OPNsense

Monviech · January 24, 2025, 5:39pm

I dont host AIO right now, but this issue looks like a DNS related issue.

All DNS Records should point to the OPNsense if you want to use it as reverse proxy.

That means cloud.domain.com should always point to either the OPNsense external or internal IP address.

In your example it points to the nextcloud itself, but there is no https on 443 on the nextcloud host itself (via hosts file), so curl fails. If it would point to the OPNsense, it would get the request since it listens on https:// 443 and then reverse proxy that request back to the nextcloud host on 11000.

I don’t know why you want to curl the AIO on 80 and 443 directly.

github.com

nextcloud/all-in-one/blob/main/reverse-proxy.md

# Reverse Proxy Documentation

> [!NOTE]
> Please note that AIO comes secured with TLS out-of-the-box. So you don't need to necessarily set up your own reverse proxy if you only want to run Nextcloud AIO which is much easier. See [the normal readme](https://github.com/nextcloud/all-in-one?tab=readme-ov-file#how-to-use-this) in that case. However if port 443 should already be used because you already run a web server or reverse proxy (like Apache, Nginx, Caddy, Cloudflare Tunnel and else), you need to follow this reverse proxy documentation to set up Nextcloud AIO.

## Introduction
In order to run Nextcloud behind a web server or reverse proxy (like Apache, Nginx, Caddy, Cloudflare Tunnel and else), you need to:
1. add a specific config to your web server or reverse proxy. [See the documentation below.](#1-configure-the-reverse-proxy)
2. specify the port that AIO's integrated Apache container shall use via the environmental variable `APACHE_PORT` (that runs inside its own container and published this port on the host) and adjust the `docker run` command of AIO. [See the documentation below.](#2-use-this-startup-command).
3. Open the AIO interface at port `8080` and type in and validate your domain. [See the documentation below.](#4-open-the-aio-interface)

Here one example with all reverse proxy settings for Linux:
```
sudo docker run \
--init \
--sig-proxy=false \
--name nextcloud-aio-mastercontainer \
--restart always \
--publish 8080:8080 \
--env APACHE_PORT=11000 \

This file has been truncated. show original