Nextcloud Office (Collabora) blocks WOPI requests via IPv6 – How to make IPv4 and IPv6 work together without disabling IPv6?

Support intro

Sorry to hear you’re facing problems. :slightly_frowning_face:

The community help forum (help.nextcloud.com) is for home and non-enterprise users. Support is provided by other community members on a best effort / “as available” basis. All of those responding are volunteering their time to help you.

If you’re using Nextcloud in a business/critical setting, paid and SLA-based support services can be accessed via portal.nextcloud.com where Nextcloud engineers can help ensure your business keeps running smoothly.

Getting help

In order to help you as efficiently (and quickly!) as possible, please fill in as much of the below requested information as you can.

Before clicking submit: Please check if your query is already addressed via the following resources:

(Utilizing these existing resources is typically faster. It also helps reduce the load on our generous volunteers while elevating the signal to noise ratio of the forums otherwise arising from the same queries being posted repeatedly).

The Basics

  • Nextcloud Server version:
    • 32.0.6
  • Operating system and version:
    • Debian 13.3
  • Web server and version:
    • Apache 2.4.66
  • Reverse proxy and version
    • Apache 2.4.66 for Collabora and Nginx 1.26.3 for AppApi
  • PHP version:
    • 8.4.16
  • Is this the first time you’ve seen this error?:
    • no
  • When did this problem seem to first start?
    • about three monthe ago
  • Installation method
    • Bare Metal
  • Are you using CloudfIare, mod_security, or similar? (Yes / No)
    • no

Summary of the issue you are facing:

I am running both Nextcloud and Nextcloud Office on the same server under Debian 13. I installed Collabora by adding the package sources to Debian. As long as I do not fill in the ‘allow list for WOPI requests,’ it works. However, if I enter the public IPv4 address of my server in this list, I get the following error message:

WOPI request denied from fe80::1:40ff:fe75:99e%ens6 as it does not match the configured ranges: 78.53.221.23, 1b23:137:128:e138::3

The IP addresses for the WOPI allow list are changed when creating this ticket.

I eventually got the combination of Nextcloud Office and Nextcloud working with the public IPv4 address in the ‘allow list for WOPI requests’ by disabling IPv6 on the server. However, I would prefer not to do that. Can anyone give me tips on how to adjust the configuration so that the combination of Nextcloud Office and Nextcloud works with IPv6 enabled and the IPv4 address listed in the ‘allow list for WOPI requests’?

Steps to replicate it (hint: details matter!):

  1. Install Nextcloud Bare Metal using André / Nextcloud installscript for Debian 13 · GitLab (Nextcloud install on Debian within 10 minutes)

  2. Install Collabora using that you also can find in André / Nextcloud installscript for Debian 13 · GitLab . You need to replace the contents for variables DOMAIN and DOMAIN_COLLABORA

  3. Login in Nextcloud and try to open an Office Document. Document will not be opened, In nextcloud.log you will see a the message as pasted under ‘log entries’.

Log entries

Nextcloud

Please provide the log entries from your Nextcloud log that are generated during the time of problem (via the Copy raw option from Administration settings->Logging screen or from your nextcloud.log located in your data directory). Feel free to use a pastebin/gist service if necessary.

{"reqId":"fQt9ef7AvuRvssNDFmCJ","level":2,"time":"2026-02-14T09:33:12+00:00","remoteAddr":"fe80::1:40ff:fe75:99e%ens6","user":"--","app":"richdocuments","method":"GET","url":"/index.php/apps/richdocuments/wopi/files/7_oc2i20txxi87?access_token=3VIHVC9kGdpvwi42pFXt0gNL9mfbZaur&access_token_ttl=0&permission=edit","scriptName":"/index.php","message":"WOPI request denied from fe80::1:40ff:fe75:99e%ens6 as it does not match the configured ranges: 78.53.221.23, 1b23:137:128:e138::3","userAgent":"COOLWSD HTTP Agent 25.04.8.3","version":"32.0.6.1","data":{"app":"richdocuments"},"id":"6990418040e25"}

Web Browser

If the problem is related to the Web interface, open your browser inspector Console and Network tabs while refreshing (reloading) and reproducing the problem. Provide any relevant output/errors here that appear.

There is no problem with the web browser

Web server / Reverse Proxy

The output of your Apache/nginx/system log in /var/log/____:

Apache did not make a log entry after I tried to open an office document in Nextcloud.

Configuration

Nextcloud

The output of occ config:list system or similar is best, but, if not possible, the contents of your config.php file from /path/to/nextcloud is fine (make sure to remove any identifiable information!):

{
    "system": {
        "instanceid": "***REMOVED SENSITIVE VALUE***",
        "overwrite.cli.url": "https:\/\/my.nextcloudserver.org/",
        "htaccess.RewriteBase": "\/",
        "passwordsalt": "***REMOVED SENSITIVE VALUE***",
        "secret": "***REMOVED SENSITIVE VALUE***",
        "trusted_domains": [
            "localhost",
            "my.nextcloudserver.org"
        ],
        "datadirectory": "***REMOVED SENSITIVE VALUE***",
        "dbtype": "mysql",
        "version": "32.0.6.1",
        "dbname": "***REMOVED SENSITIVE VALUE***",
        "dbhost": "***REMOVED SENSITIVE VALUE***",
        "dbport": "",
        "dbtableprefix": "oc_",
        "mysql.utf8mb4": true,
        "dbuser": "***REMOVED SENSITIVE VALUE***",
        "dbpassword": "***REMOVED SENSITIVE VALUE***",
        "installed": true,
        "twofactor_enforced": "true",
        "twofactor_enforced_groups": [],
        "twofactor_enforced_excluded_groups": [
            "Basicusers"
        ],
        "maintenance_window_start": 1,
        "maintenance": false,
        "default_phone_region": "NL",
        "memcache.local": "\\OC\\Memcache\\APCu",
        "memcache.distributed": "\\OC\\Memcache\\Redis",
        "memcache.locking": "\\OC\\Memcache\\Redis",
        "redis": {
            "host": "***REMOVED SENSITIVE VALUE***",
            "port": "6379"
        },
        "forbidden_filename_basenames": [
            "con",
            "prn",
            "aux",
            "nul",
            "com0",
            "com1",
            "com2",
            "com3",
            "com4",
            "com5",
            "com6",
            "com7",
            "com8",
            "com9",
            "com\u00b9",
            "com\u00b2",
            "com\u00b3",
            "lpt0",
            "lpt1",
            "lpt2",
            "lpt3",
            "lpt4",
            "lpt5",
            "lpt6",
            "lpt7",
            "lpt8",
            "lpt9",
            "lpt\u00b9",
            "lpt\u00b2",
            "lpt\u00b3"
        ],
        "forbidden_filename_characters": [
            "<",
            ">",
            ":",
            "\"",
            "|",
            "?",
            "*",
            "\\",
            "\/"
        ],
        "forbidden_filename_extensions": [
            " ",
            ".",
            ".filepart",
            ".part"
        ],
        "mail_from_address": "***REMOVED SENSITIVE VALUE***",
        "mail_smtpmode": "smtp",
        "mail_sendmailmode": "smtp",
        "mail_domain": "***REMOVED SENSITIVE VALUE***",
        "mail_smtphost": "***REMOVED SENSITIVE VALUE***",
        "mail_smtpport": "587",
        "mail_smtpauth": true,
        "mail_smtpname": "***REMOVED SENSITIVE VALUE***",
        "mail_smtppassword": "***REMOVED SENSITIVE VALUE***",
        "log_rotate_size": 349175808,
        "theme": "",
        "loglevel": 0,
        "app_install_overwrite": [],
        "updater.secret": "***REMOVED SENSITIVE VALUE***"
    }
}

Apps

The output of occ app:list (if possible).

Enabled:

  • activity: 5.0.0
  • admin_audit: 1.22.0
  • announcementcenter: 7.3.0
  • app_api: 32.0.0
  • bruteforcesettings: 5.0.0
  • circles: 32.0.0
  • cloud_federation_api: 1.16.0
  • comments: 1.22.0
  • contactsinteraction: 1.13.1
  • dashboard: 7.12.0
  • dav: 1.34.2
  • deck: 1.16.3
  • federatedfilesharing: 1.22.0
  • federation: 1.22.0
  • files: 2.4.0
  • files_downloadlimit: 5.0.0-dev.0
  • files_pdfviewer: 5.0.0
  • files_reminders: 1.5.0
  • files_sharing: 1.24.1
  • files_trashbin: 1.22.0
  • files_versions: 1.25.0
  • firstrunwizard: 5.0.0
  • groupfolders: 20.1.10
  • logreader: 5.0.0
  • lookup_server_connector: 1.20.0
  • mail: 5.6.12
  • notifications: 5.0.0
  • oauth2: 1.20.0
  • password_policy: 4.0.0
  • photos: 5.0.0
  • privacy: 4.0.0
  • profile: 1.1.0
  • provisioning_api: 1.22.0
  • recommendations: 5.0.0
  • related_resources: 3.0.0
  • richdocuments: 9.0.2
  • serverinfo: 4.0.0
  • settings: 1.15.1
  • sharebymail: 1.22.0
  • support: 4.0.0
  • survey_client: 4.0.0
  • systemtags: 1.22.0
  • text: 6.0.1
  • theming: 2.7.0
  • twofactor_admin: 4.9.0
  • twofactor_backupcodes: 1.21.0
  • twofactor_totp: 14.0.0
  • updatenotification: 1.22.0
  • user_status: 1.12.0
  • viewer: 5.0.0
  • weather_status: 1.12.0
  • workflowengine: 2.14.0
    Disabled:
  • encryption: 2.20.0
  • files_external: 1.24.1
  • nextcloud_announcements: 4.0.0 (installed 4.0.0-dev.0)
  • suspicious_login: 10.0.0
  • twofactor_nextcloud_notification: 6.0.0
  • user_ldap: 1.23.0
  • webhook_listeners: 1.3.0 (installed 1.2.0)