Talk Failed to join any conversation after AIO redeployment

I was forced to re-deploy AIO. All begun from here: Issue with Passwords app - #9 by PrivaSecretarium

I cleaned up by removing all containers, images and volumes excepting mastercontainer volume.

I backed up the DB, then restore to the new deployment with the help of pgAdmin.

AIO went back to almost completely usable except Talk.

I had to change TURN secret manually that I retrieve from configuration.json file.
Test/check has passed after that.

Where to find more clues for Nextcloud Talk?

I post Talk’s container’s logs below

++ hostname -i
++ grep -oP '[0-9]+\.[0-9]+\.[0-9]+\.[0-9]+'
++ head -1
+ IPv4_ADDRESS_TALK_RELAY=172.16.26.5
++ dig nextcloud-aio-talk IN A +short +search
++ grep '^[0-9.]\+$'
++ sort
++ head -n1
+ IPv4_ADDRESS_TALK=172.16.26.5
++ dig nextcloud-aio-talk AAAA +short +search
++ grep '^[0-9a-f:]\+$'
++ sort
++ head -n1
+ IPv6_ADDRESS_TALK=fdd0:0:0:10::5
+ set +x
+ IP_BINDING=::
+ grep -q 1 /sys/module/ipv6/parameters/disable
+ grep -q 1 /proc/sys/net/ipv6/conf/all/disable_ipv6
+ grep -q 1 /proc/sys/net/ipv6/conf/default/disable_ipv6
+ set +x
/usr/lib/python3.12/site-packages/supervisor/options.py:13: UserWarning: pkg_resources is deprecated as an API. See https://setuptools.pypa.io/en/latest/pkg_resources.html. The pkg_resources package is slated for removal as early as 2025-11-30. Refrain from using this package or pin to Setuptools<81.
  import pkg_resources
Janus version: 1302 (1.3.2)
Janus commit: a1983529cc0a40fef8f84aa6f1aa27750a5d4a6d
Compiled on:  Wed Oct  8 08:53:23 UTC 2025
Logger plugins folder: /usr/local/lib/janus/loggers
---------------------------------------------------
  Starting Meetecho Janus (WebRTC Server) v1.3.2
---------------------------------------------------
Checking command line arguments...
Debug/log level is 3
Debug/log timestamps are disabled
Debug/log colors are disabled
[WARN] Janus is deployed on a private address (172.16.26.5) but you didn't specify any STUN server! Expect trouble if this is supposed to work over the internet and not just in a LAN...
[35] 2025/10/26 11:01:40.784437 [INF] Starting nats-server
[35] 2025/10/26 11:01:40.784501 [INF]   Version:  2.12.0
[35] 2025/10/26 11:01:40.784505 [INF]   Git:      [fc6ec64]
[35] 2025/10/26 11:01:40.784507 [INF]   Name:     NBVU5XRG4KB4OPLYTXCBZNIFD3ZESXLIBIOGQ2P5NCHLAHKSTRVCL3SU
[35] 2025/10/26 11:01:40.784511 [INF]   ID:       NBVU5XRG4KB4OPLYTXCBZNIFD3ZESXLIBIOGQ2P5NCHLAHKSTRVCL3SU
[35] 2025/10/26 11:01:40.784519 [INF] Using configuration file: /etc/nats.conf (sha256:bfa037b94ac399931a51e64559d5b8b099a1777b0832b8f5c14fee855e33b59c)
[35] 2025/10/26 11:01:40.785296 [INF] Listening for client connections on 127.0.0.1:4222
[35] 2025/10/26 11:01:40.785313 [INF] Server is ready
main.go:161: Starting up version 2.0.4~docker/go1.25.0 as pid 36
main.go:168: Using a maximum of 56 CPUs
natsclient.go:108: Connection established to nats://127.0.0.1:4222 (NBVU5XRG4KB4OPLYTXCBZNIFD3ZESXLIBIOGQ2P5NCHLAHKSTRVCL3SU)
grpc_common.go:176: WARNING: No GRPC server certificate and/or key configured, running unencrypted
grpc_common.go:178: WARNING: No GRPC CA configured, expecting unencrypted connections
backend_storage_static.go:82: Backend backend-1 added for https://nextcloud.<my_domain.com>/
hub.go:243: Using a maximum of 8 concurrent backend connections per host
hub.go:250: Using a timeout of 10s for backend connections
hub.go:283: No trusted proxies configured, only allowing for [127.0.0.0/8, 10.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16]
hub.go:324: Not using GeoIP database
hub.go:402: No candidates allowlist
hub.go:413: No candidates blocklist
mcu_common.go:110: Maximum bandwidth 1048576 bits/sec per publishing stream
mcu_common.go:117: Maximum bandwidth 2097152 bits/sec per screensharing stream
mcu_janus.go:164: Using a timeout of 10s for MCU requests
mcu_janus.go:176: No candidates allowlist
mcu_janus.go:188: No candidates blocklist
main.go:265: Could not initialize janus MCU (dial tcp 127.0.0.1:8188: connect: connection refused) will retry in 1s
[WARN] libcurl not available, Streaming plugin will not have RTSP support
[WARN] libogg not available, Streaming plugin will not have file-based Opus streaming
[ERR] [plugins/janus_streaming.c:janus_streaming_init:2681] Can't add 'ondemand' mountpoint 'file-ondemand-sample', unsupported format (we only support raw mu-Law and a-Law files right now)
[WARN] No Unix Sockets server started, giving up...
[WARN] The 'janus.transport.pfunix' plugin could not be initialized
Exec: /opt/eturnal/erts-15.2.6/bin/erlexec -noinput +Bd -boot /opt/eturnal/releases/1.12.2/start -mode embedded -boot_var SYSTEM_LIB_DIR /opt/eturnal/lib -config /opt/eturnal/releases/1.12.2/sys.config -args_file /opt/eturnal/releases/1.12.2/vm.args -erl_epmd_port 3470 -start_epmd false -- foreground
Root: /opt/eturnal

/opt/eturnal
mcu_common.go:110: Maximum bandwidth 1048576 bits/sec per publishing stream
mcu_common.go:117: Maximum bandwidth 2097152 bits/sec per screensharing stream
mcu_janus.go:164: Using a timeout of 10s for MCU requests
mcu_janus.go:176: No candidates allowlist
mcu_janus.go:188: No candidates blocklist
mcu_janus.go:369: Connected to Janus WebRTC Server 1.3.2 by Meetecho s.r.l.
mcu_janus.go:377: Found JANUS VideoRoom plugin 0.0.10 by Meetecho s.r.l.
mcu_janus.go:382: Data channels are supported
mcu_janus.go:386: Full-Trickle is enabled
mcu_janus.go:393: Created Janus session 440692204348203
mcu_janus.go:400: Created Janus handle 2938926693576915
main.go:297: Using janus MCU
hub.go:454: Using a timeout of 10s for MCU requests
backend_server.go:112: No IPs configured for the stats endpoint, only allowing access from 127.0.0.1
main.go:378: Listening on 0.0.0.0:8081
client.go:352: Client from 178.237.88.2 has RTT of 0 ms (340.201µs)
capabilities.go:128: Capabilities expired for https://nextcloud.<my_domain.com>/ocs/v2.php/cloud/capabilities, updating
capabilities.go:221: Received capabilities map[config:map[attachments:map[allowed:false] call:map[blur-virtual-background:false breakout-rooms:true can-enable-sip:false can-upload-background:false enabled:true end-to-end-encryption:false max-duration:0 predefined-backgrounds:[1_office.jpg 2_home.jpg 3_abstract.jpg 4_beach.jpg 5_park.jpg 6_theater.jpg 7_library.jpg 8_space_station.jpg] predefined-backgrounds-v2:[/custom_apps/spreed/img/backgrounds/1_office.jpg /custom_apps/spreed/img/backgrounds/2_home.jpg /custom_apps/spreed/img/backgrounds/3_abstract.jpg /custom_apps/spreed/img/backgrounds/4_beach.jpg /custom_apps/spreed/img/backgrounds/5_park.jpg /custom_apps/spreed/img/backgrounds/6_theater.jpg /custom_apps/spreed/img/backgrounds/7_library.jpg /custom_apps/spreed/img/backgrounds/8_space_station.jpg] recording:true recording-consent:0 sip-dialout-enabled:false sip-enabled:false start-without-media:false supported-reactions:[❤️ 🎉 👏 👋 👍 👎 🔥 😂 🤩 🤔 😲 😥]] chat:map[has-translation-providers:true has-translation-task-providers:true max-length:32000 read-privacy:0 summary-threshold:100 typing-privacy:0] conversations:map[can-create:false description-length:2000 force-passwords:false list-style:two-lines retention-event:28 retention-instant-meetings:1 retention-phone:7] experiments:map[enabled:0] federation:map[enabled:false incoming-enabled:false only-trusted-servers:true outgoing-enabled:false] previews:map[max-gif-size:3.145728e+06] signaling:map[hello-v2-token-key:-----BEGIN PUBLIC KEY-----
***SENSITIVE DATA***
-----END PUBLIC KEY-----

n-ping-limit:200]] config-local:map[attachments:[allowed folder] call:[predefined-backgrounds predefined-backgrounds-v2 can-upload-background start-without-media blur-virtual-background] chat:[read-privacy has-translation-providers has-translation-task-providers typing-privacy summary-threshold] conversations:[can-create list-style description-length] experiments:[enabled] federation:[enabled incoming-enabled outgoing-enabled only-trusted-servers] previews:[max-gif-size] signaling:[session-ping-limit hello-v2-token-key]] features:[audio video chat-v2 conversation-v4 guest-signaling empty-group-room guest-display-names multi-room-users favorites last-room-activity no-ping system-messages delete-messages mention-flag in-call-flags conversation-call-flags notification-levels invite-groups-and-mails locked-one-to-one-rooms read-only-rooms listable-rooms chat-read-marker chat-unread webinary-lobby start-call-flag chat-replies circles-support force-mute sip-support sip-support-nopin chat-read-status phonebook-search raise-hand room-description rich-object-sharing temp-user-avatar-api geo-location-sharing voice-message-sharing signaling-v3 publishing-permissions clear-history direct-mention-flag notification-calls conversation-permissions rich-object-list-media rich-object-delete unified-search chat-permission silent-send silent-call send-call-notification talk-polls breakout-rooms-v1 recording-v1 avatar chat-get-context single-conversation-status chat-keep-notifications typing-privacy remind-me-later bots-v1 markdown-messages media-caption session-state note-to-self recording-consent sip-support-dialout delete-messages-unlimited edit-messages silent-send-state chat-read-last federation-v1 federation-v2 ban-v1 chat-reference-id mention-permissions edit-messages-note-to-self archived-conversations-v2 talk-polls-drafts download-call-participants email-csv-import conversation-creation-password call-notification-state-api schedule-meeting edit-draft-poll conversation-creation-all important-conversations unbind-conversation sip-direct-dialin dashboard-event-rooms mutual-calendar-events upcoming-reminders sensitive-conversations message-expiration reactions chat-summary-api call-end-to-end-encryption] features-local:[favorites chat-read-status listable-rooms phonebook-search temp-user-avatar-api unified-search avatar remind-me-later note-to-self archived-conversations-v2 chat-summary-api call-notification-state-api schedule-meeting conversation-creation-all important-conversations sip-direct-dialin dashboard-event-rooms mutual-calendar-events upcoming-reminders sensitive-conversations] version:21.1.5] from https://nextcloud.<my_domain.com>/ocs/v2.php/cloud/capabilities
hub.go:935: Register user user@backend-1 from ***SENSITIVE DATA*** in unknown-country (Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36) ***SENSITIVE DATA***
hub.go:1033: Unregister ***SENSITIVE DATA***= (private=***SENSITIVE DATA***)
client.go:352: Client from ***SENSITIVE DATA*** has RTT of 0 ms (781.355µs)

Among further troubleshooting by deploying an AIO sandbox, found out that the shared password under WebSocket URL should be SIGNALING_SECRET from configuration.json.

On the sandbox, I changed one character of the shared secret, then became unusable which is expected by me.

After entering the correct SIGNALING_SECRET on the prod instance, the issue still persist

Further investigation:

I restored the database to a working sandbox instance with another subdomain, noticed that after restoration of the db all settings of Talk got rewritten.


After modifying the URL on the sandbox to reach sandbox’s instance, talk went back to be usable.

I might follow that path by backup Nextcloud in production database, clean it, redeploy with another temporary domain, do what mentioned above to restore, then finally redo everything with the production domain.

Or someone might have a shortcut?