Nextcloud Office - Document loading failed - This request has been blocked; the content must be served over HTTPS

Happy new year everyone!

I just installed Nextcloud today on an on-premises Ubuntu server, and everything appears to be working well, except for Collabora. Files can be uploaded/downloading no problem, all other built-in features seem to be working, and the server is accessible from the Internet (including the Android app).

However, when I try to open office documents for editing in the web UI, this happens:

Clicking on a document shows “Loading {document name}…”
image
shortly followed by “Document loading failed / Failed to load Nextcloud Office - please try again later”

The most relevant message from the browser console appears to be:

Mixed Content: The page at 'https://nextcloud.mydomain.hopto.org/index.php/apps/dashboard/' was loaded over HTTPS, but requested an insecure form action 'http://nextcloud.mydomain.hopto.org/apps/richdocumentscode/proxy.php?req=/browser/1e92cc5/cool.html?WOPISrc=https%3A%2F%2Fnextcloud.mydomain.hopto.org%2Findex.php%2Fapps%2Frichdocuments%2Fwopi%2Ffiles%2F962_oc7c8qptfbvf&title=New%20document.odt&lang=en&closebutton=1&revisionhistory=1'. This request has been blocked; the content must be served over HTTPS.

If I go directly to the URL mentioned in the message (replacing http with https), it shows this:
image
and its browser console has this error:

Mixed Content: The page at 'https://nextcloud.mydomain.hopto.org/apps/richdocumentscode/proxy.php?req=/browser/1e92cc5/cool.html?WOPISrc=https%3A%2F%2Fnextcloud.mydomain.hopto.org%2Findex.php%2Fapps%2Frichdocuments%2Fwopi%2Ffiles%2F962_oc7c8qptfbvf&title=New%20document.odt&lang=en&closebutton=1&revisionhistory=1' was loaded over HTTPS, but requested an insecure XMLHttpRequest endpoint 'http://nextcloud.mydomain.hopto.org/apps/richdocumentscode/proxy.php?req=/cool/https%3A%2F%2Fnextcloud.mydomain.hopto.org%2Findex.php%2Fapps%2Frichdocuments%2Fwopi%2Ffiles%2F962_oc7c8qptfbvf/ws?WOPISrc=https%3A%2F%2Fnextcloud.mydomain.hopto.org%2Findex.php%2Fapps%2Frichdocuments%2Fwopi%2Ffiles%2F962_oc7c8qptfbvf&compat=/ws/open/open/0'. This request has been blocked; the content must be served over HTTPS.

Nextcloud version: 23.0.0
Operating system and version: Ubuntu Server 20.04.3 LTS
Apache or nginx version: Apache/2.4.41 (Ubuntu)
PHP version: PHP 7.4.3 (cli) (built: Nov 25 2021 23:16:22)

Is this the first time you’ve seen this error? I only installed Nextcloud today; it has never worked

The output of your Nextcloud log in **Admin > Logging**
...older lines removed to fit in 32K limit...
{"reqId":"YwpKkNVueMeaC0QK840r","level":1,"time":"2022-01-03T22:21:23+00:00","remoteAddr":"172.30.2.158","user":"--","app":"updater","method":"GET","url":"/core/ajax/update.php?requesttoken=OxHsQatr1XfAuBnI0YIc25bWMBXFFL7VvPQRamczxFY%3D%3AaHm1LOo5v0Koi0G%2BouMr6v6gQ1SVfvjszr5SKx5wkDw%3D","message":"\\OC\\Repair::step: Repair step: Check encryption key format","userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.110 Safari/537.36","version":"23.0.0.10"}
{"reqId":"YwpKkNVueMeaC0QK840r","level":1,"time":"2022-01-03T22:21:23+00:00","remoteAddr":"172.30.2.158","user":"--","app":"no app in context","method":"GET","url":"/core/ajax/update.php?requesttoken=OxHsQatr1XfAuBnI0YIc25bWMBXFFL7VvPQRamczxFY%3D%3AaHm1LOo5v0Koi0G%2BouMr6v6gQ1SVfvjszr5SKx5wkDw%3D","message":"Deprecated event type for \\OC\\Repair::step: Symfony\\Component\\EventDispatcher\\GenericEvent is used","userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.110 Safari/537.36","version":"23.0.0.10"}
{"reqId":"YwpKkNVueMeaC0QK840r","level":1,"time":"2022-01-03T22:21:23+00:00","remoteAddr":"172.30.2.158","user":"--","app":"updater","method":"GET","url":"/core/ajax/update.php?requesttoken=OxHsQatr1XfAuBnI0YIc25bWMBXFFL7VvPQRamczxFY%3D%3AaHm1LOo5v0Koi0G%2BouMr6v6gQ1SVfvjszr5SKx5wkDw%3D","message":"\\OC\\Repair::step: Repair step: Remove old dashboard app config data","userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.110 Safari/537.36","version":"23.0.0.10"}
{"reqId":"YwpKkNVueMeaC0QK840r","level":1,"time":"2022-01-03T22:21:23+00:00","remoteAddr":"172.30.2.158","user":"--","app":"no app in context","method":"GET","url":"/core/ajax/update.php?requesttoken=OxHsQatr1XfAuBnI0YIc25bWMBXFFL7VvPQRamczxFY%3D%3AaHm1LOo5v0Koi0G%2BouMr6v6gQ1SVfvjszr5SKx5wkDw%3D","message":"Deprecated event type for \\OC\\Repair::step: Symfony\\Component\\EventDispatcher\\GenericEvent is used","userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.110 Safari/537.36","version":"23.0.0.10"}
{"reqId":"YwpKkNVueMeaC0QK840r","level":1,"time":"2022-01-03T22:21:23+00:00","remoteAddr":"172.30.2.158","user":"--","app":"updater","method":"GET","url":"/core/ajax/update.php?requesttoken=OxHsQatr1XfAuBnI0YIc25bWMBXFFL7VvPQRamczxFY%3D%3AaHm1LOo5v0Koi0G%2BouMr6v6gQ1SVfvjszr5SKx5wkDw%3D","message":"\\OC\\Repair::step: Repair step: Add job to cleanup the bruteforce entries","userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.110 Safari/537.36","version":"23.0.0.10"}
{"reqId":"YwpKkNVueMeaC0QK840r","level":1,"time":"2022-01-03T22:21:23+00:00","remoteAddr":"172.30.2.158","user":"--","app":"no app in context","method":"GET","url":"/core/ajax/update.php?requesttoken=OxHsQatr1XfAuBnI0YIc25bWMBXFFL7VvPQRamczxFY%3D%3AaHm1LOo5v0Koi0G%2BouMr6v6gQ1SVfvjszr5SKx5wkDw%3D","message":"Deprecated event type for \\OC\\Repair::step: Symfony\\Component\\EventDispatcher\\GenericEvent is used","userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.110 Safari/537.36","version":"23.0.0.10"}
{"reqId":"YwpKkNVueMeaC0QK840r","level":1,"time":"2022-01-03T22:21:23+00:00","remoteAddr":"172.30.2.158","user":"--","app":"updater","method":"GET","url":"/core/ajax/update.php?requesttoken=OxHsQatr1XfAuBnI0YIc25bWMBXFFL7VvPQRamczxFY%3D%3AaHm1LOo5v0Koi0G%2BouMr6v6gQ1SVfvjszr5SKx5wkDw%3D","message":"\\OC\\Repair::step: Repair step: Queue a one-time job to check for user uploaded certificates","userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.110 Safari/537.36","version":"23.0.0.10"}
{"reqId":"YwpKkNVueMeaC0QK840r","level":1,"time":"2022-01-03T22:21:23+00:00","remoteAddr":"172.30.2.158","user":"--","app":"no app in context","method":"GET","url":"/core/ajax/update.php?requesttoken=OxHsQatr1XfAuBnI0YIc25bWMBXFFL7VvPQRamczxFY%3D%3AaHm1LOo5v0Koi0G%2BouMr6v6gQ1SVfvjszr5SKx5wkDw%3D","message":"Deprecated event type for \\OC\\Repair::step: Symfony\\Component\\EventDispatcher\\GenericEvent is used","userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.110 Safari/537.36","version":"23.0.0.10"}
{"reqId":"YwpKkNVueMeaC0QK840r","level":1,"time":"2022-01-03T22:21:23+00:00","remoteAddr":"172.30.2.158","user":"--","app":"updater","method":"GET","url":"/core/ajax/update.php?requesttoken=OxHsQatr1XfAuBnI0YIc25bWMBXFFL7VvPQRamczxFY%3D%3AaHm1LOo5v0Koi0G%2BouMr6v6gQ1SVfvjszr5SKx5wkDw%3D","message":"\\OC\\Repair::step: Repair step: Repair DAV shares","userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.110 Safari/537.36","version":"23.0.0.10"}
{"reqId":"YwpKkNVueMeaC0QK840r","level":1,"time":"2022-01-03T22:21:23+00:00","remoteAddr":"172.30.2.158","user":"--","app":"no app in context","method":"GET","url":"/core/ajax/update.php?requesttoken=OxHsQatr1XfAuBnI0YIc25bWMBXFFL7VvPQRamczxFY%3D%3AaHm1LOo5v0Koi0G%2BouMr6v6gQ1SVfvjszr5SKx5wkDw%3D","message":"Deprecated event type for \\OC\\Repair::step: Symfony\\Component\\EventDispatcher\\GenericEvent is used","userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.110 Safari/537.36","version":"23.0.0.10"}
{"reqId":"YwpKkNVueMeaC0QK840r","level":1,"time":"2022-01-03T22:21:23+00:00","remoteAddr":"172.30.2.158","user":"--","app":"updater","method":"GET","url":"/core/ajax/update.php?requesttoken=OxHsQatr1XfAuBnI0YIc25bWMBXFFL7VvPQRamczxFY%3D%3AaHm1LOo5v0Koi0G%2BouMr6v6gQ1SVfvjszr5SKx5wkDw%3D","message":"\\OC\\Repair::step: Repair step: Add background job to set the lookup server share state for users","userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.110 Safari/537.36","version":"23.0.0.10"}
{"reqId":"YwpKkNVueMeaC0QK840r","level":1,"time":"2022-01-03T22:21:23+00:00","remoteAddr":"172.30.2.158","user":"--","app":"updater","method":"GET","url":"/core/ajax/update.php?requesttoken=OxHsQatr1XfAuBnI0YIc25bWMBXFFL7VvPQRamczxFY%3D%3AaHm1LOo5v0Koi0G%2BouMr6v6gQ1SVfvjszr5SKx5wkDw%3D","message":"\\OC\\Updater::startCheckCodeIntegrity: Starting code integrity check...","userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.110 Safari/537.36","version":"23.0.0.10"}
{"reqId":"IogMfi3R3gJ6JZ5Cx7F9","level":0,"time":"2022-01-03T22:21:25+00:00","remoteAddr":"172.30.2.158","user":"user@email","app":"no app in context","method":"PUT","url":"/index.php/apps/user_status/heartbeat","message":"JSCombiner: successfully cached: merged-template-prepend.js","userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.110 Safari/537.36","version":"23.0.0.10"}
{"reqId":"IogMfi3R3gJ6JZ5Cx7F9","level":0,"time":"2022-01-03T22:21:25+00:00","remoteAddr":"172.30.2.158","user":"user@email","app":"scss_cacher","method":"PUT","url":"/index.php/apps/user_status/heartbeat","message":"SCSSCacher::process ordinary check follows","userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.110 Safari/537.36","version":"23.0.0.10"}
{"reqId":"IogMfi3R3gJ6JZ5Cx7F9","level":0,"time":"2022-01-03T22:21:25+00:00","remoteAddr":"172.30.2.158","user":"user@email","app":"scss_cacher","method":"PUT","url":"/index.php/apps/user_status/heartbeat","message":"SCSSCacher::isCached 8f4e-4525-server.css isCachedCache is expired or unset","userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.110 Safari/537.36","version":"23.0.0.10"}
{"reqId":"IogMfi3R3gJ6JZ5Cx7F9","level":0,"time":"2022-01-03T22:21:25+00:00","remoteAddr":"172.30.2.158","user":"user@email","app":"scss_cacher","method":"PUT","url":"/index.php/apps/user_status/heartbeat","message":"SCSSCacher::isCached NotFoundException /appdata_oc7c8qptfbvf/css/core/8f4e-4525-server.css","userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.110 Safari/537.36","version":"23.0.0.10"}
{"reqId":"IogMfi3R3gJ6JZ5Cx7F9","level":0,"time":"2022-01-03T22:21:25+00:00","remoteAddr":"172.30.2.158","user":"user@email","app":"scss_cacher","method":"PUT","url":"/index.php/apps/user_status/heartbeat","message":"SCSSCacher::process Lock acquired for /core/css/server.scss","userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.110 Safari/537.36","version":"23.0.0.10"}
{"reqId":"IogMfi3R3gJ6JZ5Cx7F9","level":0,"time":"2022-01-03T22:21:27+00:00","remoteAddr":"172.30.2.158","user":"user@email","app":"scss_cacher","method":"PUT","url":"/index.php/apps/user_status/heartbeat","message":"SCSSCacher::cache /core/css/server.scss compiled and successfully cached","userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.110 Safari/537.36","version":"23.0.0.10"}
{"reqId":"IogMfi3R3gJ6JZ5Cx7F9","level":0,"time":"2022-01-03T22:21:27+00:00","remoteAddr":"172.30.2.158","user":"user@email","app":"scss_cacher","method":"PUT","url":"/index.php/apps/user_status/heartbeat","message":"SCSSCacher::process Lock removed for /core/css/server.scss","userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.110 Safari/537.36","version":"23.0.0.10"}
{"reqId":"IogMfi3R3gJ6JZ5Cx7F9","level":0,"time":"2022-01-03T22:21:27+00:00","remoteAddr":"172.30.2.158","user":"user@email","app":"scss_cacher","method":"PUT","url":"/index.php/apps/user_status/heartbeat","message":"SCSSCacher::process ordinary check follows","userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.110 Safari/537.36","version":"23.0.0.10"}
{"reqId":"IogMfi3R3gJ6JZ5Cx7F9","level":0,"time":"2022-01-03T22:21:27+00:00","remoteAddr":"172.30.2.158","user":"user@email","app":"scss_cacher","method":"PUT","url":"/index.php/apps/user_status/heartbeat","message":"SCSSCacher::isCached 8f4e-4525-css-variables.css isCachedCache is expired or unset","userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.110 Safari/537.36","version":"23.0.0.10"}
{"reqId":"IogMfi3R3gJ6JZ5Cx7F9","level":0,"time":"2022-01-03T22:21:27+00:00","remoteAddr":"172.30.2.158","user":"user@email","app":"scss_cacher","method":"PUT","url":"/index.php/apps/user_status/heartbeat","message":"SCSSCacher::isCached NotFoundException /appdata_oc7c8qptfbvf/css/core/8f4e-4525-css-variables.css","userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.110 Safari/537.36","version":"23.0.0.10"}
{"reqId":"IogMfi3R3gJ6JZ5Cx7F9","level":0,"time":"2022-01-03T22:21:27+00:00","remoteAddr":"172.30.2.158","user":"user@email","app":"scss_cacher","method":"PUT","url":"/index.php/apps/user_status/heartbeat","message":"SCSSCacher::process Lock acquired for /core/css/css-variables.scss","userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.110 Safari/537.36","version":"23.0.0.10"}
{"reqId":"IogMfi3R3gJ6JZ5Cx7F9","level":0,"time":"2022-01-03T22:21:27+00:00","remoteAddr":"172.30.2.158","user":"user@email","app":"scss_cacher","method":"PUT","url":"/index.php/apps/user_status/heartbeat","message":"SCSSCacher::cache /core/css/css-variables.scss compiled and successfully cached","userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.110 Safari/537.36","version":"23.0.0.10"}
{"reqId":"IogMfi3R3gJ6JZ5Cx7F9","level":0,"time":"2022-01-03T22:21:27+00:00","remoteAddr":"172.30.2.158","user":"user@email","app":"scss_cacher","method":"PUT","url":"/index.php/apps/user_status/heartbeat","message":"SCSSCacher::process Lock removed for /core/css/css-variables.scss","userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.110 Safari/537.36","version":"23.0.0.10"}
{"reqId":"PQ41F3oWCjWnkD4EJQ9E","level":0,"time":"2022-01-03T22:21:27+00:00","remoteAddr":"172.30.2.158","user":"user@email","app":"scss_cacher","method":"PUT","url":"/index.php/apps/user_status/heartbeat","message":"SCSSCacher::process ordinary check follows","userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.110 Safari/537.36","version":"23.0.0.10"}
{"reqId":"PQ41F3oWCjWnkD4EJQ9E","level":0,"time":"2022-01-03T22:21:27+00:00","remoteAddr":"172.30.2.158","user":"user@email","app":"scss_cacher","method":"PUT","url":"/index.php/apps/user_status/heartbeat","message":"SCSSCacher::isCached 8f4e-4525-server.css isCachedCache is expired or unset","userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.110 Safari/537.36","version":"23.0.0.10"}
{"reqId":"PQ41F3oWCjWnkD4EJQ9E","level":0,"time":"2022-01-03T22:21:27+00:00","remoteAddr":"172.30.2.158","user":"user@email","app":"scss_cacher","method":"PUT","url":"/index.php/apps/user_status/heartbeat","message":"SCSSCacher::isCached 8f4e-4525-server.css dependencies successfully cached for 5 minutes","userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.110 Safari/537.36","version":"23.0.0.10"}
{"reqId":"PQ41F3oWCjWnkD4EJQ9E","level":0,"time":"2022-01-03T22:21:27+00:00","remoteAddr":"172.30.2.158","user":"user@email","app":"scss_cacher","method":"PUT","url":"/index.php/apps/user_status/heartbeat","message":"SCSSCacher::process ordinary check follows","userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.110 Safari/537.36","version":"23.0.0.10"}
{"reqId":"PQ41F3oWCjWnkD4EJQ9E","level":0,"time":"2022-01-03T22:21:27+00:00","remoteAddr":"172.30.2.158","user":"user@email","app":"scss_cacher","method":"PUT","url":"/index.php/apps/user_status/heartbeat","message":"SCSSCacher::isCached 8f4e-4525-css-variables.css isCachedCache is expired or unset","userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.110 Safari/537.36","version":"23.0.0.10"}
{"reqId":"PQ41F3oWCjWnkD4EJQ9E","level":0,"time":"2022-01-03T22:21:27+00:00","remoteAddr":"172.30.2.158","user":"user@email","app":"scss_cacher","method":"PUT","url":"/index.php/apps/user_status/heartbeat","message":"SCSSCacher::isCached 8f4e-4525-css-variables.css dependencies successfully cached for 5 minutes","userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.110 Safari/537.36","version":"23.0.0.10"}
{"reqId":"lyYQt8kgyZisYpt98EFf","level":0,"time":"2022-01-03T22:21:31+00:00","remoteAddr":"172.30.2.158","user":"user@email","app":"scss_cacher","method":"PUT","url":"/index.php/apps/user_status/heartbeat","message":"SCSSCacher::process ordinary check follows","userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.110 Safari/537.36","version":"23.0.0.10"}
{"reqId":"lyYQt8kgyZisYpt98EFf","level":0,"time":"2022-01-03T22:21:31+00:00","remoteAddr":"172.30.2.158","user":"user@email","app":"scss_cacher","method":"PUT","url":"/index.php/apps/user_status/heartbeat","message":"SCSSCacher::process ordinary check follows","userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.110 Safari/537.36","version":"23.0.0.10"}
{"reqId":"YwpKkNVueMeaC0QK840r","level":1,"time":"2022-01-03T22:22:43+00:00","remoteAddr":"172.30.2.158","user":"--","app":"updater","method":"GET","url":"/core/ajax/update.php?requesttoken=OxHsQatr1XfAuBnI0YIc25bWMBXFFL7VvPQRamczxFY%3D%3AaHm1LOo5v0Koi0G%2BouMr6v6gQ1SVfvjszr5SKx5wkDw%3D","message":"\\OC\\Updater::finishedCheckCodeIntegrity: Finished code integrity check","userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.110 Safari/537.36","version":"23.0.0.10"}
{"reqId":"YwpKkNVueMeaC0QK840r","level":1,"time":"2022-01-03T22:22:43+00:00","remoteAddr":"172.30.2.158","user":"--","app":"updater","method":"GET","url":"/core/ajax/update.php?requesttoken=OxHsQatr1XfAuBnI0YIc25bWMBXFFL7VvPQRamczxFY%3D%3AaHm1LOo5v0Koi0G%2BouMr6v6gQ1SVfvjszr5SKx5wkDw%3D","message":"\\OC\\Updater::updateEnd: Update successful","userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.110 Safari/537.36","version":"23.0.0.10"}
{"reqId":"YwpKkNVueMeaC0QK840r","level":1,"time":"2022-01-03T22:22:43+00:00","remoteAddr":"172.30.2.158","user":"--","app":"updater","method":"GET","url":"/core/ajax/update.php?requesttoken=OxHsQatr1XfAuBnI0YIc25bWMBXFFL7VvPQRamczxFY%3D%3AaHm1LOo5v0Koi0G%2BouMr6v6gQ1SVfvjszr5SKx5wkDw%3D","message":"\\OC\\Updater::maintenanceDisabled: Turned off maintenance mode","userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.110 Safari/537.36","version":"23.0.0.10"}
{"reqId":"YwpKkNVueMeaC0QK840r","level":1,"time":"2022-01-03T22:22:43+00:00","remoteAddr":"172.30.2.158","user":"--","app":"updater","method":"GET","url":"/core/ajax/update.php?requesttoken=OxHsQatr1XfAuBnI0YIc25bWMBXFFL7VvPQRamczxFY%3D%3AaHm1LOo5v0Koi0G%2BouMr6v6gQ1SVfvjszr5SKx5wkDw%3D","message":"\\OC\\Updater::resetLogLevel: Reset log level to Warning(2)","userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.110 Safari/537.36","version":"23.0.0.10"}
{"reqId":"1FfApz1c90f9p2poqPvS","level":0,"time":"2022-01-03T22:22:45+00:00","remoteAddr":"172.30.2.158","user":"administrator","app":"scss_cacher","method":"PUT","url":"/index.php/apps/user_status/heartbeat","message":"SCSSCacher::process ordinary check follows","userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.110 Safari/537.36","version":"23.0.0.10"}
{"reqId":"1FfApz1c90f9p2poqPvS","level":0,"time":"2022-01-03T22:22:45+00:00","remoteAddr":"172.30.2.158","user":"administrator","app":"scss_cacher","method":"PUT","url":"/index.php/apps/user_status/heartbeat","message":"SCSSCacher::process ordinary check follows","userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.110 Safari/537.36","version":"23.0.0.10"}
{"reqId":"DN2kBYFMKNozl1AVCvUG","level":0,"time":"2022-01-03T22:22:45+00:00","remoteAddr":"172.30.2.158","user":"administrator","app":"scss_cacher","method":"PUT","url":"/index.php/apps/user_status/heartbeat","message":"SCSSCacher::process ordinary check follows","userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.110 Safari/537.36","version":"23.0.0.10"}
{"reqId":"DN2kBYFMKNozl1AVCvUG","level":0,"time":"2022-01-03T22:22:45+00:00","remoteAddr":"172.30.2.158","user":"administrator","app":"scss_cacher","method":"PUT","url":"/index.php/apps/user_status/heartbeat","message":"SCSSCacher::process ordinary check follows","userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.110 Safari/537.36","version":"23.0.0.10"}
{"reqId":"Aku6xV298hrVWc8Ba5jT","level":0,"time":"2022-01-03T22:22:45+00:00","remoteAddr":"172.30.2.158","user":"administrator","app":"scss_cacher","method":"PUT","url":"/index.php/apps/user_status/heartbeat","message":"SCSSCacher::process ordinary check follows","userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.110 Safari/537.36","version":"23.0.0.10"}
{"reqId":"Aku6xV298hrVWc8Ba5jT","level":0,"time":"2022-01-03T22:22:45+00:00","remoteAddr":"172.30.2.158","user":"administrator","app":"scss_cacher","method":"PUT","url":"/index.php/apps/user_status/heartbeat","message":"SCSSCacher::process ordinary check follows","userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.110 Safari/537.36","version":"23.0.0.10"}
{"reqId":"yGp0SIrWK7u9It8Rssuj","level":0,"time":"2022-01-03T22:22:45+00:00","remoteAddr":"172.30.2.158","user":"administrator","app":"scss_cacher","method":"PUT","url":"/index.php/apps/user_status/heartbeat","message":"SCSSCacher::process ordinary check follows","userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.110 Safari/537.36","version":"23.0.0.10"}
{"reqId":"yGp0SIrWK7u9It8Rssuj","level":0,"time":"2022-01-03T22:22:45+00:00","remoteAddr":"172.30.2.158","user":"administrator","app":"scss_cacher","method":"PUT","url":"/index.php/apps/user_status/heartbeat","message":"SCSSCacher::process ordinary check follows","userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.110 Safari/537.36","version":"23.0.0.10"}

The output of your config.php file in `/path/to/nextcloud` (make sure you remove any identifiable information!):
<?php
$CONFIG = array (
  'instanceid' => 'oc7c********',
  'passwordsalt' => 'LZ3U0*************************',
  'secret' => '/vgImsLq1mK*************************************',
  'trusted_domains' =>
  array (
    0 => 'nextcloud.mydomain.hopto.org',
  ),
  'trusted_proxies' =>
  array (
    0 => '172.17.1.1',
    1 => '172.30.1.1',
  ),
  'datadirectory' => '/nextcloud-data',
  'dbtype' => 'mysql',
  'version' => '23.0.0.10',
  'overwrite.cli.url' => 'https://nextcloud.mydomain.hopto.org',
  'dbname' => 'nextcloud',
  'dbhost' => 'localhost',
  'dbport' => '',
  'dbtableprefix' => 'oc_',
  'mysql.utf8mb4' => true,
  'dbuser' => 'nextcloud',
  'dbpassword' => 'v**********',
  'installed' => true,
  'mail_smtpmode' => 'smtp',
  'mail_smtpsecure' => 'tls',
  'mail_sendmailmode' => 'smtp',
  'mail_from_address' => 'username',
  'mail_domain' => 'gmail.com',
  'mail_smtpauthtype' => 'PLAIN',
  'mail_smtpauth' => 1,
  'mail_smtphost' => 'smtp.gmail.com',
  'mail_smtpport' => '587',
  'mail_smtpname' => 'username@gmail.com',
  'mail_smtppassword' => '***************',
  'maintenance' => false,
  'overwriteprotocol' => 'https',
  'default_phone_region' => 'ca',
  'memcache.distributed' => '\\OC\\Memcache\\Redis',
  'memcache.local' => '\\OC\\Memcache\\Redis',
  'memcache.locking' => '\\OC\\Memcache\\Redis',
  'redis' =>
  array (
    'host' => 'localhost',
    'port' => 6379,
  ),
  'theme' => '',
  'loglevel' => 2,
);

The output of your Apache/nginx/system log in /var/log/____:
There are three files and two of them are quite large… anything specifically I should be looking for here?

cat /etc/apache2/sites-enabled/nextcloud.conf
<VirtualHost *:80>
  DocumentRoot /var/www/nextcloud/
  ServerName  nextcloud.mydomain.hopto.org

  <Directory /var/www/nextcloud/>
    Require all granted
    AllowOverride All
    Options FollowSymLinks MultiViews

    <IfModule mod_dav.c>
      Dav off
    </IfModule>

    <IfModule mod_headers.c>
      Header always set Strict-Transport-Security "max-age=15552000; includeSubDomains"
    </IfModule>

  </Directory>
</VirtualHost>

I’m not using Docker for anything in this install. The installation is mostly based on these instructions: https://docs.nextcloud.com/server/latest/admin_manual/installation/example_ubuntu.html.

The SSL is being handled by a Squid reverse proxy in pfSense running on a separate system. Communication between Nextcloud/Apache/Ubuntu and Squid is plain HTTP, with the reverse proxy handling the HTTPS to the client.

Collabera is using the built-in CODE server, which is reported as reachable:

If I click the “Use your own server” option, it reveals the URL being used, which interestingly has “https”, and not “http”:
image

The closest discussion I could find is Could not establish connection to the Collabora Online server - #14 by alzxjm, where the problem is mentioned, then the discussion moved to Docker, which I’m not using. The same error is mentioned at https://www.reddit.com/r/NextCloud/comments/ikggxj/comment/g3lfyy3/ but the discussion does not continue (and a comment was deleted, assuming related to having 'overwriteprotocol' => 'https' in config.php).

This error is also mentioned at NC 19 unable to Use Build in Code Server · Issue #26 · CollaboraOnline/richdocumentscode · GitHub, but the rest of the discussion appears to be involve refused connections, which shouldn’t apply in this case (as mentioned earlier, going to the URL directly works). The comment following that one mentions,

Somewhere in the CODE setup there seems to be “http://” be hardcoded - even if your domain is setup via “https:”

and while that’s what I’m also feeling, surely that can’t be the case given how few people appear to be affected by this.

Any ideas on how to get this working?

1 Like

I have the same issue. Almost. If I go to my Collabora server I get the Apache Default Page.

Also looking (in vain?) for a solution.

Also on Nextcloud 23. Wanted to upgrade from 20 to 23, accidentally the system tried to upgrade the directly which I know it does not do. Had to reinstall NC because I could see no possibility to mend the problem any other way. I have now been able to install NC 23 and it seems to work well.

Collabora does not, though.

Any suggestions from the community?

I updated the container (image) yesterday and suffered the same issue. I only now realized that Collabora swiched the SERVICE name from loolwsd to coolwsd including /etc/coolwsd path – and also all corresponding URLs, as well as loleaflet to browser. After changing all these in my NGINX reverse proxy configs, all was back to normal.

I only now realized that Lymkwi already wrote about that 3 weeks ago.

1 Like

I solved my problem by remake the proxy files. Since the last update the name lool was renamed by cool.
So I removed all the proxy configuration in the virtual host
https://sdk.collaboraonline.com/docs/installation/Proxy_settings.html