Support intro
Sorry to hear youâre facing problems. 
The community help forum (help.nextcloud.com) is for home and non-enterprise users. Support is provided by other community members on a best effort / âas availableâ basis. All of those responding are volunteering their time to help you.
If youâre using Nextcloud in a business/critical setting, paid and SLA-based support services can be accessed via portal.nextcloud.com where Nextcloud engineers can help ensure your business keeps running smoothly.
Getting help
In order to help you as efficiently (and quickly!) as possible, please fill in as much of the below requested information as you can.
Before clicking submit: Please check if your query is already addressed via the following resources:
- Official documentation (searchable and regularly updated)
- How to topics and FAQs
- Forum search
(Utilizing these existing resources is typically faster. It also helps reduce the load on our generous volunteers while elevating the signal to noise ratio of the forums otherwise arising from the same queries being posted repeatedly).
Some or all of the below information will be requested if it isnât supplied; for fastest response please provide as much as you can. ![]()
The Basics
- Nextcloud Server version (e.g., 29.x.x):
32.0.2
- Operating system and version (e.g., Ubuntu 24.04):
Ubuntu 24.04 LTS
- Web server and version (e.g, Apache 2.4.25):
replace me
- Reverse proxy and version _(e.g. nginx 1.27.2)
nginx 1.24.0
- PHP version (e.g, 8.3):
8.3.28
- Is this the first time youâve seen this error? (Yes / No):
YES
- When did this problem seem to first start?
After i switched from the docker-socket-proxy to HARP AIO because of the error in Nextcloud saying that you should switch to a APP-Api Proxy with HARP
- Installation method (e.g. AlO, NCP, Bare Metal/Archive, etc.)
AIO
- Are you using CloudfIare, mod_security, or similar? (Yes / No)
NO
Summary of the issue you are facing:
I installed the Harp AIO container.
The Test connection works but the Test Deploy fails always. He isnt showing any progress in the window and returns a heartbeat error at the end.
I edited the nginx config. I dont know if this step was correct:
server {
listen 80;
server_name cloud.marvindorn.de;
location /.well-known/acme-challenge/ {
root /var/www/html;
}
location / {
return 301 https://$host$request_uri;
}
}
server {
listen 443 ssl http2;
server_name my.domain;
ssl_certificate /etc/letsencrypt/live/my.domain/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/my.domain/privkey.pem;
include /etc/letsencrypt/options-ssl-nginx.conf;
location /exapps/ {
proxy_pass http://127.0.0.1:11001/;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto https;
proxy_buffering off;
client_max_body_size 10G;
}
location / {
proxy_pass http://127.0.0.1:11000; # Nextcloud AIO intern
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto https;
proxy_buffering off;
client_max_body_size 10G;
}
# .well-known Weiterleitungen
location = /.well-known/carddav { return 301 /remote.php/dav/; }
location = /.well-known/caldav { return 301 /remote.php/dav/; }
location = /.well-known/webfinger { return 301 /index.php/.well-known/webfinger; }
location = /.well-known/nodeinfo { return 301 /index.php/.well-known/nodeinfo; }
}
Here ist the logs from the container:
INFO: /certs/frp directory created.
INFO: Generating self-signed certificates in /certs/frpâŠ
Certificate request self-signature ok
subject=CN=harp.nc
Certificate request self-signature ok
subject=CN=harp.client.nc
INFO: Certificate generation completed.
INFO: Creating /haproxy.cfg from haproxy.cfg.templateâŠ
INFO: No /certs/cert.pem found, disabling HTTPS frontendsâŠ
INFO: Final /haproxy.cfg:
SPDX-FileCopyrightText: 2025 Nextcloud GmbH and Nextcloud contributors
SPDX-License-Identifier: AGPL-3.0-or-later
###############################################################################
haproxy.cfg.template
This template is processed by envsubst in start.sh to replace variables:
HP_EXAPPS_ADDRESS,
HP_EXAPPS_HTTPS_ADDRESS,
HP_TIMEOUT_CONNECT,
HP_TIMEOUT_CLIENT,
HP_TIMEOUT_SERVER,
If /certs/cert.pem is not found, lines containing âHTTPS_FRONTENDâ are
commented out automatically in start.sh.
###############################################################################
global
log stdout local0 warning
maxconn 8192
ca-base /etc/ssl/certs
defaults
log global
option httplog
option dontlognull
timeout connect 30s
timeout client 30s
timeout server 1800s
###############################################################################
FRONTEND: ex_apps (HTTP)
###############################################################################
frontend ex_apps
mode http
bind 0.0.0.0:8780
filter spoe engine exapps-spoe config /etc/haproxy/spoe-agent.conf
http-request silent-drop if { var(txn.exapps.bad_request) -m int eq 1 }
http-request return status 401 content-type text/plain string "401 Unauthorized" if { var(txn.exapps.unauthorized) -m int eq 1 }
http-request return status 403 content-type text/plain string "403 Forbidden" if { var(txn.exapps.forbidden) -m int eq 1 }
http-request return status 404 content-type text/plain string "404 Not Found" if { var(txn.exapps.not_found) -m int eq 1 }
use_backend %[var(txn.exapps.backend)]
###############################################################################
FRONTEND: ex_apps_https (only enabled if /certs/cert.pem exists)
###############################################################################
#HTTPS_FRONTEND frontend ex_apps_https
#HTTPS_FRONTEND mode http
#HTTPS_FRONTEND bind 0.0.0.0:8781 ssl crt /certs/cert.pem
#HTTPS_FRONTEND filter spoe engine exapps-spoe config /etc/haproxy/spoe-agent.conf
#HTTPS_FRONTEND http-request silent-drop if { var(txn.exapps.bad_request) -m int eq 1 }
#HTTPS_FRONTEND http-request return status 401 content-type text/plain string â401 Unauthorizedâ if { var(txn.exapps.unauthorized) -m int eq 1 }
#HTTPS_FRONTEND http-request return status 403 content-type text/plain string â403 Forbiddenâ if { var(txn.exapps.forbidden) -m int eq 1 }
#HTTPS_FRONTEND http-request return status 404 content-type text/plain string â404 Not Foundâ if { var(txn.exapps.not_found) -m int eq 1 }
#HTTPS_FRONTEND use_backend %[var(txn.exapps.backend)]
###############################################################################
BACKENDS: ex_apps & ex_apps_backend_w_bruteforce
###############################################################################
backend ex_apps_backend
mode http
server frp_server 0.0.0.0
http-request set-path %[var(txn.exapps.target_path)]
http-request set-dst var(txn.exapps.target_ip)
http-request set-dst-port var(txn.exapps.target_port)
http-request set-header EX-APP-ID %[var(txn.exapps.exapp_id)]
http-request set-header EX-APP-VERSION %[var(txn.exapps.exapp_version)]
http-request set-header AUTHORIZATION-APP-API %[var(txn.exapps.exapp_token)]
http-request set-header AA-VERSION â32â # TO-DO: temporary, remove it after we update all ExApps.
backend ex_apps_backend_w_bruteforce
mode http
server frp_server 0.0.0.0
http-request set-path %[var(txn.exapps.target_path)]
http-request set-dst var(txn.exapps.target_ip)
http-request set-dst-port var(txn.exapps.target_port)
http-request set-header EX-APP-ID %[var(txn.exapps.exapp_id)]
http-request set-header EX-APP-VERSION %[var(txn.exapps.exapp_version)]
http-request set-header AUTHORIZATION-APP-API %[var(txn.exapps.exapp_token)]
http-request set-header AA-VERSION â32â # TO-DO: temporary, remove it after we update all ExApps.
filter spoe engine exapps-bruteforce-protection-spoe config /etc/haproxy/spoe-agent.conf
###############################################################################
BACKEND: nextcloud_control (HTTP)
###############################################################################
backend nextcloud_control_backend
mode http
server nextcloud_control 127.0.0.1:8200
http-request set-path %[var(txn.exapps.target_path)]
###############################################################################
BACKEND: docker_engine (HTTP)
###############################################################################
backend docker_engine_backend
mode http
server frp_server 127.0.0.1
http-request set-dst-port var(txn.exapps.target_port)
http-request set-path %[var(txn.exapps.target_path)]
# docker system _ping
http-request allow if { path,url_dec -m reg -i ^(/v[\d\.]+)?/_ping$ } METH_GET
# docker inspect image
http-request allow if { path,url_dec -m reg -i ^(/v[\d\.]+)?/images/.*/json } METH_GET
# container inspect: GET containers/%s/json
http-request allow if { path,url_dec -m reg -i ^(/v[\d\.]+)?/containers/nc_app_[a-zA-Z0-9_.-]+/json } METH_GET
# container inspect: GET containers/%s/logs
http-request allow if { path,url_dec -m reg -i ^(/v[\d\.]+)?/containers/nc_app_[a-zA-Z0-9_.-]+/logs } METH_GET
# image pull: POST images/create?fromImage=%s
http-request allow if { path,url_dec -m reg -i ^(/v[\d\.]+)?/images/create } METH_POST
http-request deny
backend agents
mode tcp
timeout connect 5s
timeout server 3m
option spop-check
server agent1 127.0.0.1:9600 check
INFO: FRP server configuration generated at /frps.toml.
INFO: Detected /var/run/docker.sock, generating /frpc-docker.toml configuration fileâŠ
INFO: Starting Python HaProxy Agent on 127.0.0.1:8200 and 127.0.0.1:9600âŠ
INFO: Waiting for HaRP Agent HTTP (GET http://127.0.0.1:8200/info) to be readyâŠ
INFO: Waiting for SPOA port 127.0.0.1:9600âŠ
INFO: Starting FRP server on 0.0.0.0:8782âŠ
INFO: Waiting for FRP server port 127.0.0.1:8782âŠ
INFO: Starting FRP client for Docker EngineâŠ
INFO: Starting HAProxyâŠ
[NOTICE] (1) : Initializing new worker (55)
2025-11-30 15:45:42.224 [I] [sub/root.go:142] start frpc service for config file [/frpc-docker.toml]
2025-11-30 15:45:42.224 [I] [client/service.go:295] try to connect to serverâŠ
2025-11-30 15:45:42.245 [I] [client/service.go:287] [aac1e35443d61598] login to server success, get run id [aac1e35443d61598]
2025-11-30 15:45:42.246 [I] [proxy/proxy_manager.go:173] [aac1e35443d61598] proxy added: [bundled-deploy-daemon]
2025-11-30 15:45:42.249 [I] [client/control.go:168] [aac1e35443d61598] [bundled-deploy-daemon] start proxy success
[NOTICE] (1) : Loading success.
[NOTICE] (1) : Reloading HAProxy
[NOTICE] (1) : Initializing new worker (116)
<132>Nov 30 15:46:05 haproxy[55]: Proxy ex_apps stopped (cumulated conns: FE: 3, BE: 0).
<132>Nov 30 15:46:05 haproxy[55]: Proxy ex_apps_backend stopped (cumulated conns: FE: 0, BE: 0).
<132>Nov 30 15:46:05 haproxy[55]: Proxy ex_apps_backend_w_bruteforce stopped (cumulated conns: FE: 0, BE: 0).
<132>Nov 30 15:46:05 haproxy[55]: Proxy nextcloud_control_backend stopped (cumulated conns: FE: 0, BE: 0).
<132>Nov 30 15:46:05 haproxy[55]: Proxy docker_engine_backend stopped (cumulated conns: FE: 0, BE: 1).
<132>Nov 30 15:46:05 haproxy[55]: Proxy agents stopped (cumulated conns: FE: 0, BE: 1).
[NOTICE] (1) : Loading success.
[WARNING] (55) : Proxy ex_apps stopped (cumulated conns: FE: 3, BE: 0).
[WARNING] (55) : Proxy ex_apps_backend stopped (cumulated conns: FE: 0, BE: 0).
[WARNING] (55) : Proxy ex_apps_backend_w_bruteforce stopped (cumulated conns: FE: 0, BE: 0).
[WARNING] (55) : Proxy nextcloud_control_backend stopped (cumulated conns: FE: 0, BE: 0).
[WARNING] (55) : Proxy docker_engine_backend stopped (cumulated conns: FE: 0, BE: 1).
[WARNING] (55) : Proxy agents stopped (cumulated conns: FE: 0, BE: 1).
[NOTICE] (1) : haproxy version is 3.1.2-cda631a
[WARNING] (1) : Former worker (55) exited with code 0 (Exit)
After the docker run for the container he keeps me in the log screen of the container and if i leave with ctrl+c or by closing the ssh then he gets the last few messages. But even if i stay in the log screen then it isnt working aswell.









