[Security and setup warnings] Nextcloud-AIO 30.0.1

[/details]

Nextcloud-AIO version 30.0.1
Operating system and version , Ubuntu 24.04), Docker-rootless
Apache latest
PHP version latest

The issue you are facing
nextcloud-aio instance is running but with a load of warnings. Don’t know if its rootless docker or caddy and Tailscale.

Is this the first time you’ve seen this error? YES

Steps to replicate it:

  1. nextcloud-aio by default should mitigate such warnings with out user manual configuration

The output

Security & setup warnings
 
It's important for the security and performance of your instance that everything is configured correctly. To help you with that we are doing some automatic checks. Please see the linked documentation for more information.
There are some warnings regarding your setup.
 
    Could not check that the data directory is protected. Please check manually that your server does not allow access to the data directory. To allow this check to run you have to make sure that your Web server can connect to itself. Therefore it must be able to resolve and connect to at least one of its `trusted_domains` or the `overwrite.cli.url`. This failure may be the result of a server-side DNS mismatch or outbound firewall rule.
    Your webserver is not set up to serve `.js.map` files. Without these files, JavaScript Source Maps won't function properly, making it more challenging to troubleshoot and debug any issues that may arise.
    Unable to run check for JavaScript support. Please remedy or confirm manually if your webserver serves `.mjs` files using the JavaScript MIME type. To allow this check to run you have to make sure that your Web server can connect to itself. Therefore it must be able to resolve and connect to at least one of its `trusted_domains` or the `overwrite.cli.url`. This failure may be the result of a server-side DNS mismatch or outbound firewall rule.
    Could not check if your web server properly resolves the OCM and OCS provider URLs. To allow this check to run you have to make sure that your Web server can connect to itself. Therefore it must be able to resolve and connect to at least one of its `trusted_domains` or the `overwrite.cli.url`. This failure may be the result of a server-side DNS mismatch or outbound firewall rule.
    6 errors in the logs since October 21, 2024, 2:59:03 PM
    One or more mimetype migrations are available. Occasionally new mimetypes are added to better handle certain file types. Migrating the mimetypes take a long time on larger instances so this is not done automatically during upgrades. Use the command `occ maintenance:repair --include-expensive` to perform the migrations.
 
    Could not check that your web server is properly set up to allow file synchronization over WebDAV. Please check manually. To allow this check to run you have to make sure that your Web server can connect to itself. Therefore it must be able to resolve and connect to at least one of its `trusted_domains` or the `overwrite.cli.url`. This failure may be the result of a server-side DNS mismatch or outbound firewall rule. For more details see the documentation ↗.
    Could not check that your web server serves `.well-known` correctly. Please check manually. To allow this check to run you have to make sure that your Web server can connect to itself. Therefore it must be able to resolve and connect to at least one of its `trusted_domains` or the `overwrite.cli.url`. This failure may be the result of a server-side DNS mismatch or outbound firewall rule. For more details see the documentation ↗.
    Could not check for otf loading support. Please check manually if your webserver serves `.otf` files. To allow this check to run you have to make sure that your Web server can connect to itself. Therefore it must be able to resolve and connect to at least one of its `trusted_domains` or the `overwrite.cli.url`. This failure may be the result of a server-side DNS mismatch or outbound firewall rule. For more details see the documentation ↗.
    Could not check that your web server serves security headers correctly. Please check manually. For more details see the documentation ↗.
    Your installation has no default phone region set. This is required to validate phone numbers in the profile settings without a country code. To allow numbers without a country code, please add "default_phone_region" with the respective ISO 3166-1 code of the region to your config file. For more details see the documentation ↗.
    You have not set or verified your email server configuration, yet. Please head over to the "Basic settings" in order to set them. Afterwards, use the "Send email" button below the form to verify your settings. For more details see the documentation ↗.
 
Please double check the installation guides ↗, and check for any errors or warnings in the log

NOTE: need community help to resolve the warnings

All of the Could not check [...] warnings are the result of the server being unable to connect to itself via at least one of its trusted_domains or the overwrite.cli.url values (as noted in the output).

nextcloud-aio instance is running but with a load of warnings. Don’t know if its rootless docker or caddy and Tailscale.

If I had to bet, Tailscale since this is a connectivity/DNS matter in your environment.

1 Like

All right. but is there any solution to it? any configuration I need to resolve it?

Any solution?

You’ll need to do some troubleshooting based on the hints suggested in the warnings as well as in my prior response. Also see:

This topic was automatically closed 90 days after the last reply. New replies are no longer allowed.