I cannot access the Nextcloud server via AIO or a client when using my private WLAN

Support intro

Sorry to hear you’re facing problems. :slightly_frowning_face:

The community help forum (help.nextcloud.com) is for home and non-enterprise users. Support is provided by other community members on a best effort / “as available” basis. All of those responding are volunteering their time to help you.

If you’re using Nextcloud in a business/critical setting, paid and SLA-based support services can be accessed via portal.nextcloud.com where Nextcloud engineers can help ensure your business keeps running smoothly.

Getting help

In order to help you as efficiently (and quickly!) as possible, please fill in as much of the below requested information as you can.

Before clicking submit: Please check if your query is already addressed via the following resources:

(Utilizing these existing resources is typically faster. It also helps reduce the load on our generous volunteers while elevating the signal to noise ratio of the forums otherwise arising from the same queries being posted repeatedly).

Some or all of the below information will be requested if it isn’t supplied; for fastest response please provide as much as you can. :heart:

The Basics

  • Nextcloud Server version (e.g., 29.x.x):
    • ?
  • Operating system and version (e.g., Ubuntu 24.04):
    • Debian GNU/Linux 12 (bookworm) (raspbianOS)
  • Web server and version (e.g, Apache 2.4.25):
    • 2.4.65
  • Reverse proxy and version _(e.g. nginx 1.27.2)
    • no reverse proxy
  • PHP version (e.g, 8.3):
    • 8.3.25
  • Is this the first time you’ve seen this error? (Yes / No):
    • No, after the first installation it doesn't work
  • When did this problem seem to first start?
    • some weeks ago, probably some update of OS, router or AIO?
  • Installation method (e.g. AlO, NCP, Bare Metal/Archive, etc.)
    • AIO v11.8
  • Are you using CloudfIare, mod_security, or similar? (Yes / No)
    • No

Summary of the issue you are facing:

I cannot connect to the NextCloud Server (MYDOMAIN.ddns.net) when using my privat WLAN. In this WLAN the NextCloud Server is also running.
I cannot connect using Open your Nextcloud from AIO or a mobile client or the desktop client.
When I change to mobile Network everthing works fine.

Steps to replicate it (hint: details matter!):

Log entries

Nextcloud

Please provide the log entries from your Nextcloud log that are generated during the time of problem (via the Copy raw option from Administration settings->Logging screen or from your nextcloud.log located in your data directory). Feel free to use a pastebin/gist service if necessary.

Log entries of the Desktop Client (Linux Mint 22.1):

2025-09-25 18:05:01:942 [ warning qt.core.qobject.connect unknown:0 ]:	QObject::connect(OCC::NextcloudTheme, Unknown): invalid nullptr parameter
2025-09-25 18:05:02:179 [ warning nextcloud.gui.application /home/user/src/gui/application.cpp:528 ]:	Migration result AccountManager::AccountsRestoreResult:  OCC::AccountManager::AccountsRestoreSuccess
2025-09-25 18:05:02:179 [ warning nextcloud.gui.application /home/user/src/gui/application.cpp:529 ]:	Folders migrated:  1
2025-09-25 18:05:02:179 [ warning nextcloud.gui.application /home/user/src/gui/application.cpp:530 ]:	No accounts were migrated, prompting user to set up accounts and folders from scratch.
2025-09-25 18:05:02:211 [ warning qt.qml.typeregistration unknown:0 ]:	Invalid QML element name "Activity"; value type names should begin with a lowercase letter
2025-09-25 18:05:02:211 [ warning qt.qml.typeregistration unknown:0 ]:	Invalid QML element name "TalkNotificationData"; value type names should begin with a lowercase letter
2025-09-25 18:05:02:211 [ warning qt.qml.typeregistration unknown:0 ]:	Invalid QML element name "UserStatus"; value type names should begin with a lowercase letter
2025-09-25 18:05:02:211 [ warning qt.qml.typeregistration unknown:0 ]:	Invalid QML element name "Sharee"; value type names should begin with a lowercase letter
2025-09-25 18:05:02:211 [ warning qt.core.qobject.connect unknown:0 ]:	QObject::connect(QNetworkInformation, OCC::Application): invalid nullptr parameter
2025-09-25 18:05:02:218 [ warning nextcloud.sync.configfile /home/user/src/libsync/configfile.cpp:740 ]:	Default update channel is "stable"
2025-09-25 18:05:02:561 [ warning default qrc:/qml/src/gui/tray/MainWindow.qml:252 ]:	qrc:/qml/src/gui/tray/MainWindow.qml:252:9: QML UnifiedSearchInputContainer: Binding loop detected for property "implicitWidth":
2025-09-25 18:05:02:579 [ warning default qrc:/qml/src/gui/tray/MainWindow.qml:252 ]:	qrc:/qml/src/gui/tray/MainWindow.qml:252:9: QML UnifiedSearchInputContainer: Binding loop detected for property "rightPadding":
2025-09-25 18:05:02:580 [ warning default qrc:/qml/src/gui/tray/MainWindow.qml:252 ]:	qrc:/qml/src/gui/tray/MainWindow.qml:252:9: QML UnifiedSearchInputContainer: Binding loop detected for property "rightPadding":
2025-09-25 18:05:02:580 [ warning default qrc:/qml/src/gui/tray/MainWindow.qml:252 ]:	qrc:/qml/src/gui/tray/MainWindow.qml:252:9: QML UnifiedSearchInputContainer: Binding loop detected for property "rightPadding":
2025-09-25 18:05:02:589 [ warning qt.qml.context unknown:0 ]:	qrc:/qml/src/gui/tray/CurrentAccountHeaderButton.qml:82:13 Parameter "index" is not declared. Injection of parameters into signal handlers is deprecated. Use JavaScript functions with formal parameters instead.
2025-09-25 18:05:02:597 [ warning qt.qml.context unknown:0 ]:	qrc:/qml/src/gui/tray/CurrentAccountHeaderButton.qml:83:13 Parameter "object" is not declared. Injection of parameters into signal handlers is deprecated. Use JavaScript functions with formal parameters instead.
2025-09-25 18:05:02:630 [ warning nextcloud.gui.account.manager /home/user/src/gui/accountmanager.cpp:605 ]:	Failed to read proxy password to keychain "Entry not found"
2025-09-25 18:05:02:631 [ warning nextcloud.sync.credentials.keychainchunk /home/user/src/libsync/creds/keychainchunk.cpp:349 ]:	Unable to read "andi_clientCertificatePEM:https://MYDOMAIN.ddns.net/:0" chunk "0" "Entry not found"
2025-09-25 18:05:02:633 [ warning nextcloud.sync.credentials.keychainchunk /home/user/src/libsync/creds/keychainchunk.cpp:349 ]:	Unable to read "andi_clientKeyPEM:https://MYDOMAIN.ddns.net/:0" chunk "0" "Entry not found"
2025-09-25 18:05:02:633 [ warning nextcloud.sync.credentials.webflow /home/user/src/gui/creds/webflowcredentials.cpp:469 ]:	Unable to read client key "Entry not found"
2025-09-25 18:05:02:634 [ warning nextcloud.sync.credentials.keychainchunk /home/user/src/libsync/creds/keychainchunk.cpp:349 ]:	Unable to read "andi_clientCaCertificatePEM0:https://MYDOMAIN.ddns.net/:0" chunk "0" "Entry not found"
2025-09-25 18:05:02:634 [ warning nextcloud.sync.credentials.webflow /home/user/src/gui/creds/webflowcredentials.cpp:510 ]:	Unable to read client CA cert slot "0" "Entry not found"

No Errors found in the docker logs, but the docker container notify-push shows this messages

2025-09-23T13:28:28.536233654Z Waiting for Nextcloud to start...
2025-09-23T13:28:33.545673552Z Waiting for Nextcloud to start...
2025-09-23T13:28:38.550338330Z Connection to nextcloud-aio-nextcloud (172.18.0.9) 9001 port [tcp/*] succeeded!
2025-09-23T13:28:38.555573625Z notify-push was started
2025-09-23T13:30:53.908574359Z [2025-09-23 13:30:53.907971 +00:00] ERROR [notify_push] src/main.rs:84: Self test failed: Error while communicating with nextcloud instance: error sending request for url (https://MYDOMAIN.ddns.net/index.php/apps/notify_push/test/version)

Web Browser

If the problem is related to the Web interface, open your browser inspector Console and Network tabs while refreshing (reloading) and reproducing the problem. Provide any relevant output/errors here that appear.

PASTE

Web server / Reverse Proxy

The output of your Apache/nginx/system log in /var/log/____:

PASTE HERE

Configuration

Nextcloud

The output of occ config:list system or similar is best, but, if not possible, the contents of your config.php file from /path/to/nextcloud is fine (make sure to remove any identifiable information)

docker exec --user www-data nextcloud-aio-nextcloud php occ config:list system 
{
    "system": {
        "one-click-instance": true,
        "one-click-instance.user-limit": 100,
        "memcache.local": "\\OC\\Memcache\\APCu",
        "apps_paths": [
            {
                "path": "\/var\/www\/html\/apps",
                "url": "\/apps",
                "writable": false
            },
            {
                "path": "\/var\/www\/html\/custom_apps",
                "url": "\/custom_apps",
                "writable": true
            }
        ],
        "check_data_directory_permissions": false,
        "memcache.distributed": "\\OC\\Memcache\\Redis",
        "memcache.locking": "\\OC\\Memcache\\Redis",
        "redis": {
            "host": "***REMOVED SENSITIVE VALUE***",
            "password": "***REMOVED SENSITIVE VALUE***",
            "port": 6379
        },
        "overwritehost": "MYDOMAIN.ddns.net",
        "overwriteprotocol": "https",
        "passwordsalt": "***REMOVED SENSITIVE VALUE***",
        "secret": "***REMOVED SENSITIVE VALUE***",
        "trusted_domains": [
            "localhost",
            "MYDOMAIN.ddns.net"
        ],
        "datadirectory": "***REMOVED SENSITIVE VALUE***",
        "dbtype": "pgsql",
        "version": "31.0.8.1",
        "overwrite.cli.url": "https:\/\/MYDOMAIN.ddns.net\/",
        "dbname": "***REMOVED SENSITIVE VALUE***",
        "dbhost": "***REMOVED SENSITIVE VALUE***",
        "dbport": "",
        "dbtableprefix": "oc_",
        "dbuser": "***REMOVED SENSITIVE VALUE***",
        "dbpassword": "***REMOVED SENSITIVE VALUE***",
        "installed": true,
        "instanceid": "***REMOVED SENSITIVE VALUE***",
        "maintenance": false,
        "updatechecker": false,
        "loglevel": 2,
        "log_type": "file",
        "logfile": "\/var\/www\/html\/data\/nextcloud.log",
        "log_rotate_size": 10485760,
        "log.condition": {
            "apps": [
                "admin_audit"
            ]
        },
        "preview_max_x": 2048,
        "preview_max_y": 2048,
        "jpeg_quality": 60,
        "enabledPreviewProviders": {
            "1": "OC\\Preview\\Image",
            "2": "OC\\Preview\\MarkDown",
            "3": "OC\\Preview\\MP3",
            "4": "OC\\Preview\\TXT",
            "5": "OC\\Preview\\OpenDocument",
            "6": "OC\\Preview\\Movie",
            "7": "OC\\Preview\\Krita",
            "0": "OC\\Preview\\Imaginary",
            "23": "OC\\Preview\\ImaginaryPDF"
        },
        "enable_previews": true,
        "upgrade.disable-web": true,
        "mail_smtpmode": "smtp",
        "trashbin_retention_obligation": "auto, 30",
        "versions_retention_obligation": "auto, 30",
        "activity_expire_days": 30,
        "simpleSignUpLink.shown": false,
        "share_folder": "\/Shared",
        "one-click-instance.link": "https:\/\/nextcloud.com\/all-in-one\/",
        "upgrade.cli-upgrade-link": "https:\/\/github.com\/nextcloud\/all-in-one\/discussions\/2726",
        "updatedirectory": "\/nc-updater",
        "maintenance_window_start": 100,
        "allow_local_remote_servers": true,
        "davstorage.request_timeout": 3600,
        "documentation_url.server_logs": "https:\/\/github.com\/nextcloud\/all-in-one\/discussions\/5425",
        "htaccess.RewriteBase": "\/",
        "dbpersistent": false,
        "auth.bruteforce.protection.enabled": true,
        "ratelimit.protection.enabled": true,
        "files_external_allow_create_new_local": false,
        "trusted_proxies": "***REMOVED SENSITIVE VALUE***",
        "preview_imaginary_url": "***REMOVED SENSITIVE VALUE***",
        "preview_imaginary_key": "***REMOVED SENSITIVE VALUE***",
        "mail_from_address": "***REMOVED SENSITIVE VALUE***",
        "mail_sendmailmode": "smtp",
        "mail_domain": "***REMOVED SENSITIVE VALUE***",
        "mail_smtphost": "***REMOVED SENSITIVE VALUE***",
        "mail_smtpport": "587",
        "mail_smtpauth": true,
        "mail_smtpname": "***REMOVED SENSITIVE VALUE***",
        "mail_smtppassword": "***REMOVED SENSITIVE VALUE***",
        "default_phone_region": "DE",
        "DOMAIN": "MYDOMAIN.ddns.net"
    }
}

Apps

The output of occ app:list (if possible).

docker exec --user www-data nextcloud-aio-nextcloud php occ app:list
Enabled:
  - activity: 4.0.0
  - admin_audit: 1.21.0
  - bruteforcesettings: 4.0.0
  - calendar: 5.3.9
  - circles: 31.0.0
  - cloud_federation_api: 1.14.0
  - comments: 1.21.0
  - contacts: 7.2.5
  - contactsinteraction: 1.12.0
  - dashboard: 7.11.0
  - dav: 1.33.0
  - deck: 1.15.2
  - federatedfilesharing: 1.21.0
  - federation: 1.21.0
  - files: 2.3.1
  - files_downloadlimit: 4.0.0
  - files_pdfviewer: 4.0.0
  - files_reminders: 1.4.0
  - files_sharing: 1.23.1
  - files_trashbin: 1.21.0
  - files_versions: 1.24.0
  - firstrunwizard: 4.0.0
  - logreader: 4.0.0
  - lookup_server_connector: 1.19.0
  - nextcloud-aio: 0.8.0
  - nextcloud_announcements: 3.0.0
  - notes: 4.12.3
  - notifications: 4.0.0
  - notify_push: 1.2.0
  - oauth2: 1.19.1
  - password_policy: 3.0.0
  - photos: 4.0.0
  - privacy: 3.0.0
  - profile: 1.0.0
  - provisioning_api: 1.21.0
  - recommendations: 4.0.0
  - related_resources: 2.0.0
  - serverinfo: 3.0.0
  - settings: 1.14.0
  - sharebymail: 1.21.0
  - support: 3.0.0
  - survey_client: 3.0.0
  - systemtags: 1.21.1
  - tasks: 0.16.1
  - text: 5.0.0
  - theming: 2.6.1
  - twofactor_backupcodes: 1.20.0
  - twofactor_totp: 13.0.0-dev.0
  - updatenotification: 1.21.0
  - user_status: 1.11.0
  - viewer: 4.0.0
  - weather_status: 1.11.0
  - webhook_listeners: 1.2.0
  - whiteboard: 1.2.1
  - workflowengine: 2.13.0
Disabled:
  - app_api: 5.0.2 (installed 5.0.2)
  - encryption: 2.19.0
  - files_external: 1.23.0
  - suspicious_login: 9.0.1
  - twofactor_nextcloud_notification: 5.0.0
  - user_ldap: 1.22.0

Tips for increasing the likelihood of a response

  • Use the preformatted text formatting option in the editor for all log entries and configuration output.
  • If screenshots are useful, feel free to include them.
    • If possible, also include key error output in text form so it can be searched for.
  • Try to edit log output only minimally (if at all) so that it can be ran through analyzers / formatters by those trying to help you.

It seems, that your local DNS server (in the router) does not know your external domain to grant access to your Nextcloud instance. Also check, whether you can reach your Nextcloud server using IPv4 as well as IPv6, if you use mobile services instead of WLAN.

With nslookup or tracert < your_nextclouddomain > you can check the route of your request and where it will be broken.

Please also have a look to “DNS Rebind” in your router user-guide, maybe it must be activated and set.

Thanks for the quick answer :grinning_face:
I think there was a router update in the last weeks, because the DynDNS entry was empty.
Unfortunately I do not find any “DNS rebind” or something in the router manual. My provides is Vodafone Germany.
I dont’t know how to do the checks using IPv4 or IPv6.

Here are the test results using iOS App iSH :
IPAD using LTE:

#cat /etc/resolv. conf
nameserver fe8Q::6c4d:73ff: fe08:6d64
nameserver 172.20.10.1

test 1:

#nslookup MYDOMAIN.ddns.net
nslookup: write to 'fe80::6c4d:73ff:fe08:6d64': Host is unreachable
Server: 172.20.10.1
Address: 172.20.10.1:53

Non-authoritative answer:
Name: MYDOMAIN.ddns.net
Address: 64:ff9b::52d4:f87

Non-authoritative answer:
Name: MYDOMAIN.ddns.net
Address: 82.212.15.135

#traceroute MYDOMAIN.ddns.net
traceroute: setsockopt(IPV6_CHECKSUM): Invalid argument

test 2 (only the order changes):

#nslookup MYDOMAIN.ddns.net
nslookup: write to 'fe80::6c4d:73ff:fe08:6d64': Host is unreachable
Server: 172.20.10.1
Address: 172.20.10.1:53

Non-authoritative answer:
Name: MYDOMAIN.ddns.net
Address: 82.212.15.135

Non-authoritative answer:
Name: MYDOMAIN.ddns.net
Address: 64:ff9b::52d4:f87

#traceroute MYDOMAIN.ddns.net
traceroute: setsockopt(IPV6_CHECKSUM): Invalid argument

IPAD using WLAN:

#cat /etc/resolv. conf
nameserver 2a02:8070:e287:9280:e7f:b2ff:feea:d712
nameserver 192.168.0.1

test:

#nslookup MYDOMAIN.ddns.net
Server: 2a02:8070:e287:9280:e7f:b2ff:feea:d712
Address: [2a02:8070:e287:9280:e7f:b2ff:feea:d712] :53

Non-authoritative answer:
Name: MYDOMAIN.ddns.net
Address: 82.212.15.135

Non-authoritative answer:

#traceroute MYDOAMIN.ddns.net
traceroute to MYDOMAIN.ddns.net (82.212.15.135), 30 hops max, 38 byte packets
1  ip-@82-212-015-135.um22.pools.vodafone-ip.de (82.212.15.135) 3.824 ms 2.439 ms 2.294 ms

Linux console (WLAN or LAN):

#nslookup MYDOMAIN.ddns.net
Server:		127.0.0.53
Address:	127.0.0.53#53

Non-authoritative answer:
Name:	MYDOMAIN.ddns.net
Address: 82.212.15.135

#traceroute MYDOMAIN.ddns.net
traceroute to MYDOMAIN.ddns.net (82.212.15.135), 64 hops max

What Router do you use? In Germany poppular FritzBox or a specific Model of Vodafone. DO you use Vodafone DSL, Fiber or Cable?

[quote=“afi4711, post:3, topic:232869”]
Linux console (WLAN or LAN):

#nslookup MYDOMAIN.ddns.net
Server:		127.0.0.53
Address:	127.0.0.53#53

Non-authoritative answer:
Name:	MYDOMAIN.ddns.net
Address: 82.212.15.135

#traceroute MYDOMAIN.ddns.net
traceroute to MYDOMAIN.ddns.net (82.212.15.135), 64 hops max

If http://MYDOMAIN.ddns.net is your DynDNS-Adresse of you NC-Instance your DNS Server deliver its IPv4. But the Access to it from inside ypur LAN will be blocked.

I user Cable and the Router is a model of Vodafone called “Vodafone Station”

Check a Vodafone Forum or ask Vodafone support how to set exeptions for your NC-Domain in the DNS Rebind Schutz.

But following Forum Entry says there is none:
Rebind Schutz

Yes, http://MYDOMAIN.ddns.net is the DynDNS address. And in the router configuration port 80 and 443 is forwarded to the Nextcloud server. And using its IP address xx.xx.xx.xx:8080 the AIO interface starts in the browser.

It is strange, because it has been working some weeks ago. Perhaps the router update changes something.
Now I have to read someting to understand, what “DNS rebind” (or DNS Rebind Schutz) exactly means. I never heared about.
Thank you very much. Perhaps I have to change the router

A workaround — or rather, the clean solution, since I consider NAT loopback to be a hacky workaround — would be split brain DNS. This also usually performs better, as home/provider routers generally don’t perform well with NAT loopback, if they support it at all, and/or if DNS rebinding protection doesn’t interfere.

2 Likes

Thank you very much for the detailed explanation. I will try to understand it :grimacing:. I Have AdguardHome already running on as raspi.

The solution was:

  • WLAN configuration of the clients: DNS server: IPv4 address of a raspi running AdguardHome.
  • AdguardHome filter : ||MYDOMAIN.ddns.net^$dnsrewrite="local IP-address of nextcloud server"
3 Likes

This topic was automatically closed 8 days after the last reply. New replies are no longer allowed.