more accurate description of previous issue
up to date nextcloud, running off the php-fpm docker compose stack
when I try and enable an app from the app store, I get the error;
Refused to connect to 'http://cloud.andersens.xyz/apps/files/' because it violates the following Content Security Policy directive: "connect-src 'self'".
if i disable CSP headers, I get the error;
Mixed Content: The page at 'https://cloud.andersens.xyz/settings/apps/disabled' was loaded over HTTPS, but requested an insecure XMLHttpRequest endpoint 'http://cloud.andersens.xyz/apps/files/'. This request has been blocked; the content must be served over HTTPS.
so. somehow app enabling specifically gets http prepended instead of https.
docker exec -it --user www-data nextcloud_app php occ config:list system |grep overwrite
"overwrite.cli.url": "https:\/\/cloud.andersens.xyz",
"overwriteprotocol": "https",
"overwritehost": "cloud.andersens.xyz",