Support intro
Sorry to hear you’re facing problems 
help.nextcloud.com is for home/non-enterprise users. If you’re running a business, paid support can be accessed via portal.nextcloud.com where we can ensure your business keeps running smoothly.
In order to help you as quickly as possible, before clicking Create Topic please provide as much of the below as you can. Feel free to use a pastebin service for logs, otherwise either indent short log examples with four spaces:
example
Or for longer, use three backticks above and below the code snippet:
longer
example
here
Some or all of the below information will be requested if it isn’t supplied; for fastest response please provide as much as you can 
Some useful links to gather information about your Nextcloud Talk installation:
Information about Signaling server: /index.php/index.php/settings/admin/talk#signaling_server
Information about TURN server: /index.php/settings/admin/talk#turn_server
Information about STUN server: /index.php/settings/admin/talk#stun_server
Nextcloud version (eg, 24.0.1): Nextcloud Hub 25 Autumn (32.0.4)
Talk Server version (eg, 14.0.2): Talk 22.0.9
Reverse proxy and version: caddy-tailscale latest
Custom Signaling server configured: no
Custom TURN server configured: no
Custom STUN server configured: no
The issue you are facing:
The nextcloud talk turn is not healthy, calls will not connect off of local network.
Is this the first time you’ve seen this error? (Y/N): N
Steps to replicate it:
-
Launch nextcloud with docker compose provided
-
port forward
The output of your Nextcloud log in Admin > Logging or errors in nextcloud.log in /var/www/:
unrelated:
[cron] Warning: Used memory grew by more than 50 MB when executing job OCA\PreviewGenerator\BackgroundJob\PreviewJob (id: 87148, arguments: null): 129.5 MB (before: 37.3 MB)
from ? by -- at Feb 15, 2026, 11:42:47 AM
The output of your Apache/nginx/system log in /var/log/____:
Waiting for Nextcloud to start...
Connection to nextcloud-aio-nextcloud (172.19.0.12) 9000 port [tcp/*] succeeded!
[Sun Feb 15 16:42:50.150970 2026] [mpm_event:notice] [pid 101:tid 101] AH00489: Apache/2.4.66 (Unix) configured -- resuming normal operations
[Sun Feb 15 16:42:50.150997 2026] [core:notice] [pid 101:tid 101] AH00094: Command line: '/usr/local/apache2/bin/httpd -D FOREGROUND'
INF ts=1771173770.1646535 msg=maxprocs: Leaving GOMAXPROCS=20: CPU quota undefined
INF ts=1771173770.1647754 msg=GOMEMLIMIT is updated package=github.com/KimMachineGun/automemlimit/memlimit GOMEMLIMIT=60593397350 previous=9223372036854776000
INF ts=1771173770.1647966 msg=using config from file file=/tmp/Caddyfile
INF ts=1771173770.1658823 msg=adapted config to JSON adapter=caddyfile
INF ts=1771173770.168062 msg=serving initial configuration
tailscale ACL
100.96.243.61 is ip of nextcloud.wallaby-gopher.ts.net tailscale dns
{
"action": "accept",
"src": ["*"],
"dst": ["100.96.243.61:*"],
},
Docker-compose
networks:
bridge_network:
name: bridge_network
backend_network:
name: backend_network
external: true
nextcloud-aio:
name: nextcloud-aio
#external: true
driver: bridge
enable_ipv6: false
driver_opts:
com.docker.network.driver.mtu: "9001" # Jumbo Frame
com.docker.network.bridge.host_binding_ipv4: "127.0.0.1" # Harden aio
com.docker.network.bridge.enable_icc: "true"
com.docker.network.bridge.default_bridge: "false"
com.docker.network.bridge.enable_ip_masquerade: "true"
configs:
Caddyfile:
content: |
{
tailscale {
state_dir /tailscale
}
}
https://nextcloud.wallaby-gopher.ts.net {
bind tailscale/nextcloud
reverse_proxy nextcloud-aio-apache:11000
}
volumes:
nextcloud_aio_mastercontainer:
name: nextcloud_aio_mastercontainer
caddy:
tailscale:
services:
caddy:
build:
dockerfile_inline: |
FROM docker.io/caddy:2.11-builder AS builder
RUN xcaddy build \
--with github.com/tailscale/caddy-tailscale
FROM docker.io/caddy:2.11
COPY --from=builder /usr/bin/caddy /usr/bin/caddy
#--with github.com/mholt/caddy-l4@87e3e5e2c7f986b34c0df373a5799670d7b8ca03 #removed from below run, don't forget / after caddy-tailscale
#was just 2.9
hostname: caddy
pull_policy: always
init: true
container_name: "caddy"
networks:
- bridge_network
- backend_network
- nextcloud-aio
extra_hosts:
- "host.docker.internal:host-gateway"
ports:
- "80:80"
- "443:443"
- "443:443/udp"
volumes:
- caddy:/data
- tailscale:/tailscale
- type: volume
source: turn_tailscale_sock
target: /var/run/tailscale/ # Mount the volume for /var/run/tailscale/tailscale.sock
read_only: true
configs:
- source: Caddyfile
target: /etc/caddy/Caddyfile
restart: unless-stopped
#nextcloud
nextcloud:
image: nextcloud/all-in-one:latest
init: true #not sure what this does
restart: always
networks:
- bridge_network
- backend_network
- nextcloud-aio
container_name: nextcloud-aio-mastercontainer # This line is not allowed to be changed as otherwise AIO will not work correctly
volumes:
- nextcloud_aio_mastercontainer:/mnt/docker-aio-config # This line is not allowed to be changed as otherwise the built-in backup solution will not work
- /var/run/docker.sock:/var/run/docker.sock:ro # May be changed on macOS, Windows or docker rootless. See the applicable documentation. If adjusting, don't forget to also set 'WATCHTOWER_DOCKER_SOCKET_PATH'!
ports:
- 0.0.0.0:8080:8080 #added 0.0.0.0: before 8080 broke?
environment: # Is needed when using any of the options below
# - AIO_DISABLE_BACKUP_SECTION=false # Setting this to true allows to hide the backup section in the AIO interface. See https://github.com/nextcloud/all-in-one#how-to-disable-the-backup-section
#- SKIP_DOMAIN_VALIDATION=true #might not be helping?
- APACHE_PORT=11000 # Is needed when running behind a web server or reverse proxy (like Apache, Nginx, Cloudflare Tunnel and else). See https://github.com/nextcloud/all-in-one/blob/main/reverse-proxy.md
- APACHE_IP_BINDING=127.0.0.1 #was 0.0.0.0 trying 127.0.0.1# Should be set when running behind a web server or reverse proxy (like Apache, Nginx, Cloudflare Tunnel and else) that is running on the same host. See https://github.com/nextcloud/all-in-one/blob/main/reverse-proxy.md
- APACHE_ADDITIONAL_NETWORK=backend_network
# - BORG_RETENTION_POLICY=--keep-within=7d --keep-weekly=4 --keep-monthly=6 # Allows to adjust borgs retention policy. See https://github.com/nextcloud/all-in-one#how-to-adjust-borgs-retention-policy
# - COLLABORA_SECCOMP_DISABLED=false # Setting this to true allows to disable Collabora's Seccomp feature. See https://github.com/nextcloud/all-in-one#how-to-disable-collaboras-seccomp-feature
# - NEXTCLOUD_MOUNT=/mnt/ # Allows the Nextcloud container to access the chosen directory on the host. See https://github.com/nextcloud/all-in-one#how-to-allow-the-nextcloud-container-to-access-directories-on-the-host
- NEXTCLOUD_UPLOAD_LIMIT=1G # Can be adjusted if you need more. See https://github.com/nextcloud/all-in-one#how-to-adjust-the-upload-limit-for-nextcloud
- NEXTCLOUD_MAX_TIME=3600 # Can be adjusted if you need more. See https://github.com/nextcloud/all-in-one#how-to-adjust-the-max-execution-time-for-nextcloud
- NEXTCLOUD_MEMORY_LIMIT=1024M # Can be adjusted if you need more. See https://github.com/nextcloud/all-in-one#how-to-adjust-the-php-memory-limit-for-nextcloud
# - NEXTCLOUD_TRUSTED_CACERTS_DIR=/path/to/my/cacerts # CA certificates in this directory will be trusted by the OS of the nexcloud container (Useful e.g. for LDAPS) See See https://github.com/nextcloud/all-in-one#how-to-trust-user-defined-certification-authorities-ca
# - NEXTCLOUD_ADDITIONAL_APKS=imagemagick # This allows to add additional packages to the Nextcloud container permanently. Default is imagemagick but can be overwritten by modifying this value. See https://github.com/nextcloud/all-in-one#how-to-add-os-packages-permanently-to-the-nextcloud-container
# - NEXTCLOUD_ADDITIONAL_PHP_EXTENSIONS=imagick # This allows to add additional php extensions to the Nextcloud container permanently. Default is imagick but can be overwritten by modifying this value. See https://github.com/nextcloud/all-in-one#how-to-add-php-extensions-permanently-to-the-nextcloud-container
# - NEXTCLOUD_ENABLE_DRI_DEVICE=true # This allows to enable the /dev/dri device in the Nextcloud container. ⚠️⚠️⚠️ Warning: this only works if the '/dev/dri' device is present on the host! If it should not exist on your host, don't set this to true as otherwise the Nextcloud container will fail to start! See https://github.com/nextcloud/all-in-one#how-to-enable-hardware-transcoding-for-nextcloud
- TALK_PORT=3478 # This allows to adjust the port that the talk container is using. See https://github.com/nextcloud/all-in-one#how-to-adjust-the-talk-port
# - WATCHTOWER_DOCKER_SOCKET_PATH=/var/run/docker.sock # Needs to be specified if the docker socket on the host is not located in the default '/var/run/docker.sock'. Otherwise mastercontainer updates will fail. For macos it needs to be '/var/run/docker.sock'
depends_on:
- caddy
Port forward, local ip found with “ip addr show | grep enp5s0” and using the inet using syntax XXX.XXX.X.XX
well no idea.. reach out to the project or look for an alternative - there are more services like this… but at the end you still need a direct connection to TURN server (maybe not the case with your tailscale setup) otherwise calls will suffer.
