[SOLVED] How to add trusted proxies?

[MarvvanPal]

Hi together,

I have set up a Nextcloud AIO using Docker rootless including Nginx Proxy Manager.

Basically everything works. However, I have locked myself out by several incorrect password entries of a user. The bruteforce prevention had struck. I removed the block manually in redis and was able to log in again. The blocked IP address pointed to my Nginx proxy manager.

Unfortunately I was not able to pass the IP to the trusted_proxies via ENV (the log of the mastercontainer mentioned that this is not supported) or configuration.json (no reaction at all). This manual step was also not successful - "no file or dictionary error" while standing in an empty file...

I found this post, but I don't know how to apply this from the mentioned relayd proxy to the Nginx Proxy Manager. Additionally, I can't believe that we can't change the parameter trusted_proxies (and other parameters)?.

How can I add the IP to the array of trusted_proxies?

[szaimen]

Hi, usually AIO should take care of this automatically. Can you first follow #2045?

[MarvvanPal]

The Nextcloud AIO is running in a IPv4 only network. Even the ISP is providing me only a public IPv4 address. Additionally the Dyndns provider is running IPv4 only. So, I guess we can exclude the IPv6 approach.

[szaimen]

Hm... this is interesting. So this reverse proxy container, can you run docker inspect for it?

[jrstrunk]

You can edit the config.php, where trusted proxies are set, by running sudo docker exec -u 0 -it nextcloud-aio-nextcloud /bin/bash, then vi config/config.php. Near the bottom of the file there should be a trusted_proxies list.

[lumpenputzer]

I had the same problem and added both the internal docker network gateway (it was 172.19.0.1 for me) and the IP of my external reverse proxy and it works!
I haven't tried adding only the reverse proxy yet, so maybe that would be enough.

It seems that the Nextcloud container overwrites the first two values of the trusted_proxies array on startup, so be sure to add your custom entries after that. (Maybe that's the problem you're facing @tuetenk0pp)
See the relevant portions of the Nextcloud container startup routine:

all-in-one/Containers/nextcloud/entrypoint.sh

Lines 526 to 530 in b17561d

	php /var/www/html/occ config:system:set trusted_proxies 0 --value="127.0.0.1"
	php /var/www/html/occ config:system:set trusted_proxies 1 --value="::1"
	if [ -n "$ADDITIONAL_TRUSTED_PROXY" ]; then
	php /var/www/html/occ config:system:set trusted_proxies 2 --value="$ADDITIONAL_TRUSTED_PROXY"
	fi

[tuetenk0pp]

Yes that could be possible. I was able to fix the issue with some advice from @szaimen although I am not able to find the specific comment.

I just had a look at the config.php and I can confirm, adding the reverse proxy as third entry does the trick!

[MarvvanPal]

Thanks @jrstrunk, this solved my issue, too.

@szaimen as mentioned the solution through editing the json-file didn't worked for me. This manual way editing the config.php worked. I suggest we should mention this in the reverse-proxy.md and/or implement a more convenient way while installing the AIO instance.

[lucamiani]

This did not solve the issue for me. I have configured the Trusted Proxies as following:
'trusted_proxies' => array ( 0 => '127.0.0.1', 1 => '::1', 2 => '192.168.30.25', 3 => '172.18.0.1', ),

And it doesn't work. When I restart the container I do not see the entry 2 and 3 getting loaded. It only loads the first 2.

.htaccess has been updated System config value dbpersistent set to boolean false System config value files_external_allow_create_new_local set to boolean false System config value trusted_proxies => 0 set to string 127.0.0.1 System config value trusted_proxies => 1 set to string ::1

Anyone have an Idea why this is?

[Zoey2936]

It doesn't "load" them, the log only shows that value 0 and 1 are set (again) to 127.0.0.1 and ::1

[A4alli]

@szaimen . My nextcloud log showing System config value trusted_proxies => 0 set to string 127.0.0.1
System config value trusted_proxies => 1 set to string ::1
System config value trusted_proxies => 10 set to string 172.18.0.0/16
Config value were not updated

checked conf/conf.php > same values. is it the docker bridge?