Install Script - SSL via Tailscale

ℹ️ Support
,
1

The Basics

  • Nextcloud Server version (e.g., 29.x.x):

    • 32.0 from installer scripts

  • Operating system and version (e.g., Ubuntu 24.04):

    • ubuntu 24.04.3

  • Web server and version (e.g, Apache 2.4.25):

    • Apache as per script

  • Reverse proxy and version _(e.g. nginx 1.27.2)

    • N/A

  • PHP version (e.g, 8.3):

    • It's installing PHP 8.3

  • Is this the first time you’ve seen this error? (Yes / No):

    • yes

    When did this problem seem to first start?

    • during install time

  • Installation method (e.g. AlO, NCP, Bare Metal/Archive, etc.)

    • VM Scripts

  • Are you using CloudfIare, mod_security, or similar? (Yes / No)

    • no

Summary of the issue you are facing:

I was able to create a certificate via tailscale cert and get it to correctly run but the installer scripts for the various components are looking and can’t see it’s not a self-signed cert.

Steps to replicate it (hint: details matter!):

  1. Run installer scripts but don’t install any additional tools

  2. Set up tailscale cert and confirm NC comes up without browser warning

  3. Attempt to install whiteboard, talk, others and get a warning about SSL being required

Log entries

Nextcloud

I’m not aware the installer scripts log anything. If they do I can try to find them if asked.

Web Browser

If the problem is related to the Web interface, open your browser inspector Console and Network tabs while refreshing (reloading) and reproducing the problem. Provide any relevant output/errors here that appear.

N/A Chrome and FF both gave the URL a thumbs up once the TS cert was installed

Web server / Reverse Proxy

The output of your Apache/nginx/system log in /var/log/____:

N/A

Configuration

Nextcloud

The output of occ config:list system or similar is best, but, if not possible, the contents of your config.php file from /path/to/nextcloud is fine (make sure to remove any identifiable information!):

Not available where I'm at but it seemed to be working file.

Apps

The output of occ app:list (if possible).

N/A

2

And tailscale is a VPN to get a public ipv4?

3

yeah. It’s basically wireguard wired up to various 2FA services and one feature is the ability to have them go and grab the SSL cert for you. I don’t want or need to have my nextcloud out on the public web so it’s nice to have SSL sites that way.

I really just need to know how I can get the installer scripts to understand that SSL has been enabled but it’s not via direct calls to Let’s Encrypt but via Tailscale. But b/c it is actually a valid SSL cert installation of Whiteboard or the other features is fine. Right now it says “No SSL, no whiteboard.”