Collabora briefly works on AIO restart, then fails due to socket errors.

cco · August 29, 2025, 7:39pm

The Basics

Nextcloud Server version (e.g., 29.x.x):
- 31.0.8.1
Operating system and version (e.g., Ubuntu 24.04):
- Fedora Server 42
Web server and version (e.g, Apache 2.4.25):
- Apache 2.4.65
Reverse proxy and version _(e.g. nginx 1.27.2)
- Caddy v2.8.4
PHP version (e.g, 8.3):
- 8.3.24
Is this the first time you’ve seen this error? (Yes / No):
- Yes
When did this problem seem to first start?
- Upon fresh install of Nextcloud AIO
Installation method (e.g. AlO, NCP, Bare Metal/Archive, etc.)
- AIO - Docker compose derived from the commands and example file
Are you using CloudfIare, mod_security, or similar? (Yes / No)
- Cloudflare as registrar, no tunneling or proxying services etc

Summary of the issue you are facing:

Started a fresh install of the Nextcloud AIO compose file. Adjust to allow for reverse proxying. Caddy exists on host #1, nextcloud AIO is running on host #2. All went well during install, all services work as expected except Collabora (which is green per AIO readout). When doing a fresh restart, an example ODT file will load as intended and can be modified. If I attempt to open a document afterwards, it will not load and results in the socket connection error / proxy misconfig.

Caddy config is as follows (also previously noted port and traffic type https like the example, but removed them during testing).

cloud.mydomain.com {
    reverse_proxy 192.168.1.12:11000
}

I have redacted my domain name and it will appear as example.com in most places, I do have a valid domain in place with records correctly set.

I did go through the Collabora / Talk troubleshooting thread and was not successful. I did whitelist caddy host (192.168.1.4) and 0.0.0.0/0 (all addresses) and this made no change in the behavior. With or without, a document will load only once after a restart, and subsequent attempts result in the socket / proxy misconfiguration error.

I do have COLLABORA_SECCOMP_DISABLED: true set in my compose environment flags, but the issue persisted before and after.

Steps to replicate it (hint: details matter!):

Restart containers. docker compose down && docker compose up -d
Login and open any .odt document.
Document will load and can be modified as expected.
Close document, attempt to reopen same or any other document. Proxy / socket error appears.

Log entries

Nextcloud

Please provide the log entries from your Nextcloud log that are generated during the time of problem (via the Copy raw option from Administration settings->Logging screen or from your nextcloud.log located in your data directory). Feel free to use a pastebin/gist service if necessary.

Loaded WOPI Token: paste.sh · encrypted pastebin

No App In Context (this error shows in debug mode, is present a lot): paste.sh · encrypted pastebin

Create new document log (appears when attempting to open document that already exists):

{"reqId":"NAQIFJBfEoXadpMs44jl","level":1,"time":"2025-08-29T19:02:03+00:00","remoteAddr":"192.168.1.4","user":"admin","app":"text","method":"PUT","url":"/apps/text/session/55/create","message":"Create new document of 55","userAgent":"Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36","version":"31.0.8.1","data":{"app":"text"},"id":"68b1f93a09a26"}

Web server / Reverse Proxy

The output of your Apache/nginx/system log in /var/log/____:

Caddy throws no errors.

Configuration

Nextcloud

The output of occ config:list system or similar is best, but, if not possible, the contents of your config.php file from /path/to/nextcloud is fine (make sure to remove any identifiable information!):

Server configuration detail

Operating system: Linux 6.14.0-63.fc42.x86_64 #1 SMP PREEMPT_DYNAMIC Mon Mar 24 19:53:37 UTC 2025 x86_64

Webserver: Apache/2.4.65 (Unix) (fpm-fcgi)

Database: pgsql PostgreSQL 17.5 on x86_64-pc-linux-musl, compiled by gcc (Alpine 14.2.0) 14.2.0, 64-bit

PHP version: 8.3.24

Modules loaded: Core, date, libxml, openssl, pcre, sqlite3, zlib, ctype, curl, dom, fileinfo, filter, hash, iconv, json, mbstring, SPL, session, PDO, pdo_sqlite, bz2, posix, random, readline, Reflection, standard, SimpleXML, tokenizer, xml, xmlreader, xmlwriter, mysqlnd, cgi-fcgi, apcu, bcmath, Phar, exif, ftp, gd, gmp, igbinary, imagick, imap, intl, ldap, memcached, pcntl, pdo_pgsql, pgsql, redis, smbclient, sodium, sysvsem, zip, libsmbclient, Zend OPcache

Nextcloud version: 31.0.8 - 31.0.8.1

Updated from an older Nextcloud/ownCloud or fresh install:

Where did you install Nextcloud from: unknown

Signing status

List of activated apps

Enabled:
 - activity: 4.0.0
 - admin_audit: 1.21.0
 - bruteforcesettings: 4.0.0
 - calendar: 5.5.1
 - circles: 31.0.0
 - comments: 1.21.0
 - contacts: 7.2.6
 - contactsinteraction: 1.12.0
 - dashboard: 7.11.0
 - deck: 1.15.2
 - federation: 1.21.0
 - files_antivirus: 6.0.4
 - files_downloadlimit: 4.0.0
 - files_fulltextsearch: 31.0.0
 - files_pdfviewer: 4.0.0
 - files_reminders: 1.4.0
 - files_sharing: 1.23.1
 - files_trashbin: 1.21.0
 - files_versions: 1.24.0
 - firstrunwizard: 4.0.0
 - fulltextsearch: 31.0.0
 - fulltextsearch_elasticsearch: 31.0.0
 - logreader: 4.0.0
 - nextcloud-aio: 0.8.0
 - nextcloud_announcements: 3.0.0
 - notes: 4.12.3
 - notifications: 4.0.0
 - notify_push: 1.2.0
 - password_policy: 3.0.0
 - photos: 4.0.0
 - privacy: 3.0.0
 - recommendations: 4.0.0
 - related_resources: 2.0.0
 - richdocuments: 8.7.4
 - serverinfo: 3.0.0
 - sharebymail: 1.21.0
 - spreed: 21.1.4
 - support: 3.0.0
 - survey_client: 3.0.0
 - systemtags: 1.21.1
 - tasks: 0.16.1
 - text: 5.0.0
 - twofactor_totp: 13.0.0-dev.0
 - updatenotification: 1.21.0
 - user_status: 1.11.0
 - weather_status: 1.11.0
 - webhook_listeners: 1.2.0
 - whiteboard: 1.1.3
Disabled:
 - app_api: 5.0.2
 - encryption
 - files_external
 - suspicious_login
 - twofactor_nextcloud_notification
 - user_ldap

Configuration (config/config.php)

{
    "one-click-instance": true,
    "one-click-instance.user-limit": 100,
    "memcache.local": "\\OC\\Memcache\\APCu",
    "apps_paths": [
        {
            "path": "\/var\/www\/html\/apps",
            "url": "\/apps",
            "writable": false
        },
        {
            "path": "\/var\/www\/html\/custom_apps",
            "url": "\/custom_apps",
            "writable": true
        }
    ],
    "check_data_directory_permissions": false,
    "memcache.distributed": "\\OC\\Memcache\\Redis",
    "memcache.locking": "\\OC\\Memcache\\Redis",
    "redis": {
        "host": "***REMOVED SENSITIVE VALUE***",
        "password": "***REMOVED SENSITIVE VALUE***",
        "port": 6379
    },
    "overwritehost": "cloud.example.com",
    "overwriteprotocol": "https",
    "passwordsalt": "***REMOVED SENSITIVE VALUE***",
    "secret": "***REMOVED SENSITIVE VALUE***",
    "trusted_domains": [
        "localhost",
        "cloud.example.com"
    ],
    "datadirectory": "***REMOVED SENSITIVE VALUE***",
    "dbtype": "pgsql",
    "version": "31.0.8.1",
    "overwrite.cli.url": "https:\/\/cloud.example.com\/",
    "dbname": "***REMOVED SENSITIVE VALUE***",
    "dbhost": "***REMOVED SENSITIVE VALUE***",
    "dbport": "",
    "dbtableprefix": "oc_",
    "dbuser": "***REMOVED SENSITIVE VALUE***",
    "dbpassword": "***REMOVED SENSITIVE VALUE***",
    "installed": true,
    "instanceid": "***REMOVED SENSITIVE VALUE***",
    "maintenance": false,
    "updatechecker": false,
    "loglevel": 1,
    "log_type": "file",
    "logfile": "\/var\/www\/html\/data\/nextcloud.log",
    "log_rotate_size": 10485760,
    "log.condition": {
        "apps": [
            "admin_audit"
        ]
    },
    "preview_max_x": 2048,
    "preview_max_y": 2048,
    "jpeg_quality": 60,
    "enabledPreviewProviders": {
        "1": "OC\\Preview\\Image",
        "2": "OC\\Preview\\MarkDown",
        "3": "OC\\Preview\\MP3",
        "4": "OC\\Preview\\TXT",
        "5": "OC\\Preview\\OpenDocument",
        "6": "OC\\Preview\\Movie",
        "7": "OC\\Preview\\Krita",
        "0": "OC\\Preview\\Imaginary",
        "23": "OC\\Preview\\ImaginaryPDF"
    },
    "enable_previews": true,
    "upgrade.disable-web": true,
    "mail_smtpmode": "smtp",
    "trashbin_retention_obligation": "auto, 30",
    "versions_retention_obligation": "auto, 30",
    "activity_expire_days": 30,
    "simpleSignUpLink.shown": false,
    "share_folder": "\/Shared",
    "one-click-instance.link": "https:\/\/nextcloud.com\/all-in-one\/",
    "upgrade.cli-upgrade-link": "https:\/\/github.com\/nextcloud\/all-in-one\/discussions\/2726",
    "updatedirectory": "\/nc-updater",
    "maintenance_window_start": 100,
    "allow_local_remote_servers": true,
    "davstorage.request_timeout": 3600,
    "documentation_url.server_logs": "https:\/\/github.com\/nextcloud\/all-in-one\/discussions\/5425",
    "htaccess.RewriteBase": "\/",
    "dbpersistent": false,
    "auth.bruteforce.protection.enabled": true,
    "ratelimit.protection.enabled": true,
    "files_external_allow_create_new_local": false,
    "trusted_proxies": "***REMOVED SENSITIVE VALUE***",
    "preview_imaginary_url": "***REMOVED SENSITIVE VALUE***",
    "preview_imaginary_key": "***REMOVED SENSITIVE VALUE***",
    "DOMAIN": "cloud.example.com"
}

Cron Configuration:

Mode: cron
Last: 2025-08-29T18:04:19+00:00 (285 seconds ago)

External storages: files_external is disabled

Encryption: no

User-backends:

OC\User\Database

Subscription:

No valid subscription key set

Browser: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36

Setup checks

system

Errors in the log: 3 errors in the logs since August 22, 2025, 11:09:04 AM
Mimetype migrations available: One or more mimetype migrations are available. Occasionally new mimetypes are added to better handle certain file types. Migrating the mimetypes take a long time on larger instances so this is not done automatically during upgrades. Use the command occ maintenance:repair --include-expensive to perform the migrations.

config

Default phone region: Your installation has no default phone region set. This is required to validate phone numbers in the profile settings without a country code. To allow numbers without a country code, please add “default_phone_region” with the respective ISO 3166-1 code of the region to your config file.
Email test: You have not set or verified your email server configuration, yet. Please head over to the “Basic settings” in order to set them. Afterwards, use the “Send email” button below the form to verify your settings.

talk

SIP configuration: No SIP backend configured

Talk

Talk configuration:

STUN servers

cloud.example.com:3478

TURN servers

turn:cloud.example.com:3478 - udp,tcp

Signaling servers (mode: default):

SIP dialin is disabled
SIP dialout is disabled
https://cloud.example.com/standalone-signaling/ - 2.0.3~docker

Recording servers:

Recording is enabled
Recording consent is set to “default”
http://nextcloud-aio-talk-recording:1234/ - 0.1

cco · August 29, 2025, 8:17pm

I believe this is resolved. I think two issues were at play.

I think the initial change that fixed the initial socket / proxy configuration error is as follows -

If you host your Nextcloud AIO container on Fedora 42 or another system not making use of SECCOMP and use a reverse proxy, try enabling the environment var to disable SECCOMP for Collabora. COLLABORA_SECCOMP_DISABLED: true is set inside of my compose.yml.

The change that likely made further issues was unsetting 127.0.0.1 localhost from the /etc/hosts of my nextcloud host OS (Fedora 42). I don’t remember why or when this was unset, but I know it was a suggested edit here in a forum post. I assume after I unset it, it made it impossible to locally resolve the address.

I will report back if there are any further issues.

system · September 6, 2025, 8:17pm

This topic was automatically closed 8 days after the last reply. New replies are no longer allowed.