# With a standard Docker deployed nexcloud 13, login takes ~30 seconds

**URL:** <https://help.nextcloud.com/t/with-a-standard-docker-deployed-nexcloud-13-login-takes-30-seconds/29470>\
**Category:** 📦 Appliances (Docker, Snappy, VM, NCP, AIO)\
**Tags:** docker, nc13\
**Created:** [March 25, 2018, 12:13pm UTC](https://help.nextcloud.com/t/with-a-standard-docker-deployed-nexcloud-13-login-takes-30-seconds/29470 "2018-03-25T12:13:41Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![dachary](https://help.nextcloud.com/user_avatar/help.nextcloud.com/dachary/32/8249_2.png) [@dachary](https://help.nextcloud.com/u/dachary)\
**Post date:** [March 25, 2018, 12:13pm UTC](https://help.nextcloud.com/t/with-a-standard-docker-deployed-nexcloud-13-login-takes-30-seconds/29470/1 "2018-03-25T12:13:42Z")

</div>

See also the [corresponding GitHub issue](https://github.com/nextcloud/docker/issues/293)

Nextcloud version _12 and 13_:  
Operating system and version _Debian 9_:  
Apache or nginx version _[Docker / nginx proxy / apache](https://github.com/nextcloud/docker/tree/master/.examples/docker-compose/with-nginx-proxy/postgres/apache)_:

The issue you are facing:

On both instances (one nextcloud 12 and the other nextcloud 13) deployed in the same way

Is this the first time you’ve seen this error? _N_:

Steps to replicate it:

1. git clone [https://github.com/nextcloud/docker](https://github.com/nextcloud/docker)
2. cd .examples/docker-compose/with-nginx-proxy/postgres/apache
3. sudo docker-compose up -d
4. go to [https://cloud.mycloud.com/](https://cloud.mycloud.com/) and login
5. it takes ~30 seconds to load /app/files

During these 30 seconds, the CPU and the I/O are mostly idle.

There are no additional lines in **Admin \> Logging** :

The output of your Apache/nginx/system log in `/var/log/ ____ `:

```auto
sudo docker-compose logs -f proxy
proxy_1 | nginx.1 | XXXXXXXXXXXXXX - - [25/Mar/2018:12:09:20 +0000] "GET /login HTTP/2.0" 200 3115 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:57.0) Gecko/20100101 Firefox/57.0"
proxy_1 | nginx.1 | XXXXXXXXXXXXXX - - [25/Mar/2018:12:09:21 +0000] "GET /cron.php HTTP/2.0" 200 20 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:57.0) Gecko/20100101 Firefox/57.0"
proxy_1 | nginx.1 | XXXXXXXXXXXXXX - - [25/Mar/2018:12:09:54 +0000] "POST /login HTTP/2.0" 303 0 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:57.0) Gecko/20100101 Firefox/57.0"
proxy_1 | nginx.1 | XXXXXXXXXXXXXX - - [25/Mar/2018:12:09:54 +0000] "GET /apps/files/ HTTP/2.0" 200 6341 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:57.0) Gecko/20100101 Firefox/57.0"
proxy_1 | nginx.1 | XXXXXXXXXXXXXX - - [25/Mar/2018:12:09:55 +0000] "GET /apps/gallery/config?extramediatypes=1 HTTP/2.0" 200 102 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:57.0) Gecko/20100101 Firefox/57.0"
proxy_1 | nginx.1 | XXXXXXXXXXXXXX - - [25/Mar/2018:12:09:55 +0000] "GET /ocs/v2.php/apps/notifications/api/v2/notifications HTTP/2.0" 200 74 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:57.0) Gecko/20100101 Firefox/57.0"
proxy_1 | nginx.1 | XXXXXXXXXXXXXX - - [25/Mar/2018:12:09:56 +0000] "GET /apps/encryption/ajax/getStatus HTTP/2.0" 200 77 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:57.0) Gecko/20100101 Firefox/57.0"
proxy_1 | nginx.1 | XXXXXXXXXXXXXX - - [25/Mar/2018:12:09:56 +0000] "PROPFIND /remote.php/webdav/ HTTP/2.0" 207 4598 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:57.0) Gecko/20100101 Firefox/57.0"
proxy_1 | nginx.1 | XXXXXXXXXXXXXX - - [25/Mar/2018:12:09:56 +0000] "GET /apps/systemtags/lastused HTTP/2.0" 200 9 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:57.0) Gecko/20100101 Firefox/57.0"
proxy_1 | nginx.1 | XXXXXXXXXXXXXX - - [25/Mar/2018:12:09:56 +0000] "GET /index.php/apps/files/ajax/getstoragestats.php?dir=%2F HTTP/2.0" 200 189 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:57.0) Gecko/20100101 Firefox/57.0"
proxy_1 | nginx.1 | XXXXXXXXXXXXXX - - [25/Mar/2018:12:09:56 +0000] "GET /cron.php HTTP/2.0" 200 20 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:57.0) Gecko/20100101 Firefox/57.0"
proxy_1 | nginx.1 | XXXXXXXXXXXXXX - - [25/Mar/2018:12:10:25 +0000] "GET /ocs/v2.php/apps/notifications/api/v2/notifications HTTP/2.0" 200 74 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:57.0) Gecko/20100101 Firefox/57.0"

```

---

<div class="post-metadata">

**Author:** ![Schmu](https://help.nextcloud.com/user_avatar/help.nextcloud.com/schmu/32/7823_2.png) [@Schmu](https://help.nextcloud.com/u/Schmu)\
**Post date:** [March 26, 2018, 5:08am UTC](https://help.nextcloud.com/t/with-a-standard-docker-deployed-nexcloud-13-login-takes-30-seconds/29470/2 "2018-03-26T05:08:08Z")

</div>

Hi, this sounds like the NC brute force detection is slowing down your login on purpose. This happens when too many logins failed.  
There is a section in the admin settings where you can whitelist IPs. I suggest you enter your IP there.  
And maybe yet to delete your IP from the DB table oc\_bruteforceattempts if that’s possible in the docker.

---

<div class="post-metadata">

**Author:** ![dachary](https://help.nextcloud.com/user_avatar/help.nextcloud.com/dachary/32/8249_2.png) [@dachary](https://help.nextcloud.com/u/dachary)\
**Post date:** [March 26, 2018, 6:44am UTC](https://help.nextcloud.com/t/with-a-standard-docker-deployed-nexcloud-13-login-takes-30-seconds/29470/3 "2018-03-26T06:44:07Z")

</div>

> [@Schmu](#):
>
> sounds like the NC brute force detection is slowing down your login on purpose

Sounds like this could indeed be the cause! The **Admin Logging** panel shows a number of lines like:

```
Warning	core	Login failed: 'Max' (Remote IP: '172.19.0.2')	2018-03-25T23:47:30+0200
```

There is no user **Max** meaning it’s brute force attack but… this was [deployed using Docker](https://github.com/nextcloud/docker) and all requests incorrectly originate from the same IP **172.19.0.2**. So, as soon as anyone makes too many failed login attempts everyone is blocked.

---

<div class="post-metadata">

**Author:** ![dachary](https://help.nextcloud.com/user_avatar/help.nextcloud.com/dachary/32/8249_2.png) [@dachary](https://help.nextcloud.com/u/dachary)\
**Post date:** [April 2, 2018, 7:28am UTC](https://help.nextcloud.com/t/with-a-standard-docker-deployed-nexcloud-13-login-takes-30-seconds/29470/4 "2018-04-02T07:28:54Z")

</div>

A given IP can be whitelisted with the [Bruteforce app](https://apps.nextcloud.com/apps/bruteforcesettings) which is convenient when conducting tests from a given location. Otherwise the IP from which multiple failed attempts happen for a legitimate reason will be throttled.

---

<div class="post-metadata">

**Author:** ![wwe](https://help.nextcloud.com/user_avatar/help.nextcloud.com/wwe/32/72963_2.png) [@wwe](https://help.nextcloud.com/u/wwe)\
**Post date:** [December 3, 2024, 9:38pm UTC](https://help.nextcloud.com/t/with-a-standard-docker-deployed-nexcloud-13-login-takes-30-seconds/29470/5 "2024-12-03T21:38:55Z")

</div>



---

<div class="post-metadata">

**Author:** ![wwe](https://help.nextcloud.com/user_avatar/help.nextcloud.com/wwe/32/72963_2.png) [@wwe](https://help.nextcloud.com/u/wwe)\
**Post date:** [December 9, 2024, 2:28pm UTC](https://help.nextcloud.com/t/with-a-standard-docker-deployed-nexcloud-13-login-takes-30-seconds/29470/6 "2024-12-09T14:28:47Z")

</div>


