Problems with Nextcloud file decryption after server migration – need assistance

Support intro

English Version:

I migrated my old server to a new one and copied all files via rsync. The operating system was updated from Ubuntu 18 to Ubuntu 24. Afterward, I updated Nextcloud twice. However, I suspect a problem occurred during or after the migration. Specifically, all files except the pictures appear to be encrypted, and attempts to decrypt them using Nextcloud tools have been unsuccessful.

While I have all the files from the old system, I do not have access to the old server itself. I also have access to some backup codes.

Could anyone suggest a fix for this issue or provide guidance on what steps to take?

Thank you for your support!

German Version:

Ich habe meinen alten Server auf einen neuen Server migriert und dabei alle Dateien per rsync übertragen. Das Betriebssystem wurde von Ubuntu 18 auf Ubuntu 24 aktualisiert. Anschließend habe ich Nextcloud zweimal aktualisiert. Allerdings vermute ich, dass während oder nach der Migration ein Problem aufgetreten ist. Konkret sind alle Dateien außer den Bildern anscheinend verschlüsselt, und Versuche, sie mit Nextcloud-Tools zu entschlüsseln, waren erfolglos.

Ich habe zwar alle Dateien vom alten System, aber keinen Zugriff mehr auf den alten Server. Einige Backup-Codes sind ebenfalls vorhanden.

Kann mir jemand bei diesem Problem helfen oder Hinweise geben, welche Schritte ich unternehmen kann?

Vielen Dank für die Unterstützung!

###try commands:

sudo -u www-data /usr/bin/php7.4 /var/www/…/…/occ files:scan --all
sudo -u www-data /usr/bin/php7.4 /var/www/…/…/occ encryption:decrypt-all
sudo -u www-data /usr/bin/php7.4 /var/www/…/…/occ encryption:scan:legacy-format

The Basics

  • Nextcloud Server version:
    • 19.03 -> 2steps ->21.0.9.1
  • Operating system and version:
    • Ubuntu 24.04.2 LTS
  • Web server and version :
    • Apache/2.4.58
  • PHP version (e.g, 8.3):
    • php 7.4
  • Is this the first time you’ve seen this error? (Yes / No):
    • Yes
  • When did this problem seem to first start?
    • 27.03.2025 ~18Uhr

some yml look like:

HBEGIN:oc_encryption_module:OC_DEFAULT_MODULE:cipher:AES-256-CTR:signed:true:HEND-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------…94d2f12xxx

some PDF look like:

PDF.js Version 2.5.207 (build: 0974d6052)
Nachricht: Unexpected server response (503) while retrieving PDF “https://mürle.org/cloud/remote.php/dav/files/USER/......pdf”.

Log entries

is nothing. Last entry 2020.

Configuration

Nextcloud

The output of occ config:list system or similar is best, but, if not possible, the contents of your config.php file from /path/to/nextcloud is fine (make sure to remove any identifiable information!):

{
    "system": {
        "instanceid": "***REMOVED SENSITIVE VALUE***",
        "passwordsalt": "***REMOVED SENSITIVE VALUE***",
        "secret": "***REMOVED SENSITIVE VALUE***",
        "trusted_domains": [
            "xn--mrle-0ra.org"
        ],
        "datadirectory": "***REMOVED SENSITIVE VALUE***",
        "dbtype": "mysql",
        "version": "21.0.9.1",
        "overwrite.cli.url": "http:\/\/xn--mrle-0ra.org\/cloud",
        "dbname": "***REMOVED SENSITIVE VALUE***",
        "dbhost": "***REMOVED SENSITIVE VALUE***",
        "dbport": "",
        "dbtableprefix": "oc_",
        "mysql.utf8mb4": true,
        "dbuser": "***REMOVED SENSITIVE VALUE***",
        "dbpassword": "***REMOVED SENSITIVE VALUE***",
        "installed": true,
        "maintenance": false,
        "theme": "",
        "loglevel": 0,
        "mail_from_address": "***REMOVED SENSITIVE VALUE***",
        "mail_smtpmode": "smtp",
        "mail_sendmailmode": "smtp",
        "mail_domain": "***REMOVED SENSITIVE VALUE***",
        "encryption.legacy_format_support": true,
        "encryption.key_storage_migrated": false
    }
}

Apps

Enabled:

  • accessibility: 1.7.0
  • activity: 2.14.3
  • apporder: 0.15.0
  • bookmarks: 10.5.1
  • breezedark: 21.1.0
  • bruteforcesettings: 2.4.0
  • calendar: 3.3.3
  • cloud_federation_api: 1.4.0
  • comments: 1.11.0
  • contacts: 4.2.5
  • contactsinteraction: 1.2.0
  • cookbook: 0.9.19
  • cospend: 1.3.7
  • dashboard: 7.1.0
  • dav: 1.17.1
  • encryption: 2.9.0
  • federatedfilesharing: 1.11.0
  • federation: 1.11.0
  • files: 1.16.0
  • files_antivirus: 3.3.1
  • files_mindmap: 0.0.30
  • files_pdfviewer: 2.1.1
  • files_rightclick: 1.0.0
  • files_sharing: 1.13.1
  • files_trashbin: 1.11.0
  • files_versions: 1.14.0
  • files_videoplayer: 1.10.0
  • firstrunwizard: 2.10.0
  • groupfolders: 9.0.4
  • integration_github: 1.0.0
  • logreader: 2.6.0
  • lookup_server_connector: 1.9.0
  • maps: 0.2.0
  • metadata: 0.17.0
  • nextcloud_announcements: 1.10.0
  • notes: 4.3.1
  • notifications: 2.9.0
  • oauth2: 1.9.0
  • password_policy: 1.11.0
  • passwords: 2021.12.20
  • photos: 1.3.0
  • privacy: 1.5.0
  • provisioning_api: 1.11.0
  • quota_warning: 1.13.0
  • recommendations: 1.0.0
  • serverinfo: 1.11.0
  • settings: 1.3.0
  • sharebymail: 1.11.0
  • socialsharing_email: 2.4.0
  • socialsharing_facebook: 2.4.0
  • support: 1.4.0
  • survey_client: 1.9.0
  • systemtags: 1.11.0
  • tasks: 0.14.4
  • text: 3.2.0
  • theming: 1.12.0
  • twofactor_backupcodes: 1.10.0
  • updatenotification: 1.11.0
  • user_status: 1.1.1
  • viewer: 1.5.0
  • weather_status: 1.1.0
  • workflowengine: 2.3.1
    Disabled:
  • admin_audit
  • files_external
  • mail: 1.12.9
  • onlyoffice: 7.3.2
  • phonetrack: 0.7.6
  • social: 0.4.2
  • socialsharing_twitter: 2.4.0
  • spreed: 10.0.10
  • user_ldap