Internal LAN access - I think I'm being dumb #618

DaleJP · 2022-05-11T22:59:48Z

DaleJP
May 11, 2022

I want to set up a DNS server to route internal traffic directly to Nextcloud on my Ubuntu VM on Truenas so the data doesn't have to go out and then back in.

I'm not used to this kind of set-up and can't think of what to do.

Can someone point me in the right direction, please?

the internal IP on ports 80 and 443 both get refused.

Do I adjust the config file for Nextcloud or Apache? If Apache, how do I get to the configuration within this docker image?

Sorry, I've only ever run on bare metal before and am still new to this.

Awesome, AWESOME work by the way. This takes so much headache out of Talk and the HPB for people like me. I only wish I was smart enough to have it run directly on my Truenas Scale rather than in an Ubuntu VM on it.

Answered by szaimen

May 12, 2022

You need to use your domain cloud.***************.jp to connect to your Nextcloud even in your LAN. However what you can do in order to make access faster is install a local dns server like a pihole that automatically points to the local ip-address of your Nextcloud when accessing your domain inside your LAN.

View full answer

szaimen · 2022-05-11T23:50:37Z

szaimen
May 11, 2022
Maintainer

Hello, I don't unerstand at which point it fails. Can you please add the exact steps you took here and maybe also add a screenshot?

Thanks!

0 replies

DaleJP · 2022-05-12T00:00:23Z

DaleJP
May 12, 2022
Author

Thanks for your reply. What details would you like? The Nextcloud config? I have not really touched anything in the docker as it worked so well out of the box. The server is at 192.168.2.11 and if I try that address in a browser with http or Https, 80 or 443, the server refuses. The 8080 port for the aio interface works but says to go through the settings which I believe is normal. I feel like it's a trusted address issue in Apache or NC? I entered my external domain name when I set up the aio image and that works perfectly. I can access that from inside and outside the network. I just can't access Nextcloud with the IP address over the LAN. I only want to be able to make use of my 2.5g LAN when inside the network.

…

On Thu, May 12, 2022, 08:50 Simon L. ***@***.***> wrote: Hello, I don't unerstand at which point it fails. Can you please add the exact steps you took here and maybe also add a screenshot? Thanks! — Reply to this email directly, view it on GitHub <#618 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AWWIX7X7BYFVVPBZFVU2HYTVJRBVTANCNFSM5VWNREVA> . You are receiving this because you authored the thread.Message ID: ***@***.***>

0 replies

DaleJP · 2022-05-12T00:04:07Z

DaleJP
May 12, 2022
Author

Https://192.168.2.11:443 returns "This site can't provide a secure connection" Http://192.168.2.11:80 returns "connection refused"

…

On Thu, May 12, 2022, 09:00 Dale Berry ***@***.***> wrote: Thanks for your reply. What details would you like? The Nextcloud config? I have not really touched anything in the docker as it worked so well out of the box. The server is at 192.168.2.11 and if I try that address in a browser with http or Https, 80 or 443, the server refuses. The 8080 port for the aio interface works but says to go through the settings which I believe is normal. I feel like it's a trusted address issue in Apache or NC? I entered my external domain name when I set up the aio image and that works perfectly. I can access that from inside and outside the network. I just can't access Nextcloud with the IP address over the LAN. I only want to be able to make use of my 2.5g LAN when inside the network. On Thu, May 12, 2022, 08:50 Simon L. ***@***.***> wrote: > Hello, I don't unerstand at which point it fails. Can you please add the > exact steps you took here and maybe also add a screenshot? > > Thanks! > > — > Reply to this email directly, view it on GitHub > <#618 (comment)>, > or unsubscribe > <https://github.com/notifications/unsubscribe-auth/AWWIX7X7BYFVVPBZFVU2HYTVJRBVTANCNFSM5VWNREVA> > . > You are receiving this because you authored the thread.Message ID: > ***@***.***> >

0 replies

DaleJP · 2022-05-12T00:14:59Z

DaleJP
May 12, 2022
Author

So to simplify my issue:

I think when you set the domain name on the aio setup, it enables that and disables the internal address somewhere. cloud.example.com becomes the only way to access Nextcloud.
I would like to know how to get Nextcloud to see a connection coming from 192.168.xx.xx and allow it.
Trusted Proxies? Server Name? I remember setting this up when on bare metal years ago but I'm a kindergarten teacher, not an IT guy.

Your work has made it far more accessible to me, but I just have this little hiccup.

0 replies

DaleJP · 2022-05-12T00:31:42Z

DaleJP
May 12, 2022
Author

nextcloud@nextcloud:~$ sudo docker inspect nextcloud-aio-domaincheck
[sudo] password for nextcloud:
[
    {
        "Id": "*********************************************************************",
        "Created": "2022-05-05T01:35:40.498977677Z",
        "Path": "/start.sh",
        "Args": [],
        "State": {
            "Status": "exited",
            "Running": false,
            "Paused": false,
            "Restarting": false,
            "OOMKilled": false,
            "Dead": false,
            "Pid": 0,
            "ExitCode": 137,
            "Error": "",
            "StartedAt": "2022-05-05T01:35:40.753179401Z",
            "FinishedAt": "2022-05-05T01:57:07.06196647Z"
        },
        "Image": "************************************************************************",
        "ResolvConfPath": "/var/lib/docker/containers/bd2cdc8225c596f3b3653af4a49e80bb80ce721141b7f2f026c933eb424f4092/resolv.conf",
        "HostnamePath": "/var/lib/docker/containers/bd2cdc8225c596f3b3653af4a49e80bb80ce721141b7f2f026c933eb424f4092/hostname",
        "HostsPath": "/var/lib/docker/containers/bd2cdc8225c596f3b3653af4a49e80bb80ce721141b7f2f026c933eb424f4092/hosts",
        "LogPath": "/var/lib/docker/containers/bd2cdc8225c596f3b3653af4a49e80bb80ce721141b7f2f026c933eb424f4092/bd2cdc8225c596f3b3653af4a49e80bb80ce721141b7f2f026c933eb424f4092-json.log",
        "Name": "/nextcloud-aio-domaincheck",
        "RestartCount": 0,
        "Driver": "overlay2",
        "Platform": "linux",
        "MountLabel": "",
        "ProcessLabel": "",
        "AppArmorProfile": "docker-default",
        "ExecIDs": null,
        "HostConfig": {
            "Binds": null,
            "ContainerIDFile": "",
            "LogConfig": {
                "Type": "json-file",
                "Config": {}
            },
            "NetworkMode": "default",
            "PortBindings": {
                "443/tcp": [
                    {
                        "HostIp": "",
                        "HostPort": "443"
                    }
                ]
            },
            "RestartPolicy": {
                "Name": "",
                "MaximumRetryCount": 0
            },
            "AutoRemove": false,
            "VolumeDriver": "",
            "VolumesFrom": null,
            "CapAdd": null,
            "CapDrop": null,
            "CgroupnsMode": "private",
            "Dns": [],
            "DnsOptions": [],
            "DnsSearch": [],
            "ExtraHosts": null,
            "GroupAdd": null,
            "IpcMode": "private",
            "Cgroup": "",
            "Links": null,
            "OomScoreAdj": 0,
            "PidMode": "",
            "Privileged": false,
            "PublishAllPorts": false,
            "ReadonlyRootfs": false,
            "SecurityOpt": null,
            "UTSMode": "",
            "UsernsMode": "",
            "ShmSize": 67108864,
            "Runtime": "runc",
            "ConsoleSize": [
                0,
                0
            ],
            "Isolation": "",
            "CpuShares": 0,
            "Memory": 0,
            "NanoCpus": 0,
            "CgroupParent": "",
            "BlkioWeight": 0,
            "BlkioWeightDevice": null,
            "BlkioDeviceReadBps": null,
            "BlkioDeviceWriteBps": null,
            "BlkioDeviceReadIOps": null,
            "BlkioDeviceWriteIOps": null,
            "CpuPeriod": 0,
            "CpuQuota": 0,
            "CpuRealtimePeriod": 0,
            "CpuRealtimeRuntime": 0,
            "CpusetCpus": "",
            "CpusetMems": "",
            "Devices": null,
            "DeviceCgroupRules": null,
            "DeviceRequests": null,
            "KernelMemory": 0,
            "KernelMemoryTCP": 0,
            "MemoryReservation": 0,
            "MemorySwap": 0,
            "MemorySwappiness": null,
            "OomKillDisable": null,
            "PidsLimit": null,
            "Ulimits": null,
            "CpuCount": 0,
            "CpuPercent": 0,
            "IOMaximumIOps": 0,
            "IOMaximumBandwidth": 0,
            "MaskedPaths": [
                "/proc/asound",
                "/proc/acpi",
                "/proc/kcore",
                "/proc/keys",
                "/proc/latency_stats",
                "/proc/timer_list",
                "/proc/timer_stats",
                "/proc/sched_debug",
                "/proc/scsi",
                "/sys/firmware"
            ],
            "ReadonlyPaths": [
                "/proc/bus",
                "/proc/fs",
                "/proc/irq",
                "/proc/sys",
                "/proc/sysrq-trigger"
            ]
        },
        "GraphDriver": {
            "Data": {
                "LowerDir": "/var/lib/docker/overlay2/e9382aa82d3ef994bf82d0b7f337ea60c076314ee3b67c298cd9e2339590ee26-init/diff:/var/lib/docker/overlay2/39821fe89581c13f3f34224a0f55dec05fdcc3a7ceb5696cd9f315584abe2813/diff:/var/lib/docker/overlay2/501e2c9952f4f9c07bde66fb6be9b192b7fb7c972f67157b4a8b7765eb5aff98/diff:/var/lib/docker/overlay2/169855565caea2fcd095b92f4da83065fc00cba00d3392f74cb38d927befd7bb/diff:/var/lib/docker/overlay2/6074a90756ae4cddd5a72c7711c35438dce391c2acdcba7a78f8e0fc7d61ddd7/diff:/var/lib/docker/overlay2/daa99133a9cb8b6c974d41650dd9402cf431d04f333b45bfc11b08022c20a399/diff:/var/lib/docker/overlay2/70629d2aad3245ad3a0bee145e77355dbfd996af89fce09f90600142ede5832b/diff:/var/lib/docker/overlay2/b1196774e4a96a444861f8ea8cc17bf9f08010f135a94ac5deec0f2ad1e373e9/diff:/var/lib/docker/overlay2/8417cace7c363fa8169a8c8f63e1b55995e45d58aa489cb66812a7277017485a/diff:/var/lib/docker/overlay2/9383254fe69b2dc6304ffb5296091e158a995589e1cda303c2fd0ac6088d3963/diff",
                "MergedDir": "/var/lib/docker/overlay2/e9382aa82d3ef994bf82d0b7f337ea60c076314ee3b67c298cd9e2339590ee26/merged",
                "UpperDir": "/var/lib/docker/overlay2/e9382aa82d3ef994bf82d0b7f337ea60c076314ee3b67c298cd9e2339590ee26/diff",
                "WorkDir": "/var/lib/docker/overlay2/e9382aa82d3ef994bf82d0b7f337ea60c076314ee3b67c298cd9e2339590ee26/work"
            },
            "Name": "overlay2"
        },
        "Mounts": [],
        "Config": {
            "Hostname": "bd2cdc8225c5",
            "Domainname": "",
            "User": "www-data",
            "AttachStdin": false,
            "AttachStdout": false,
            "AttachStderr": false,
            "ExposedPorts": {
                "443/tcp": {}
            },
            "Tty": false,
            "OpenStdin": false,
            "StdinOnce": false,
            "Env": [
                "INSTANCE_ID=****************************************************",
                "APACHE_PORT=443",
                "PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"
            ],
            "Cmd": null,
            "Image": "nextcloud/aio-domaincheck:latest",
            "Volumes": null,
            "WorkingDir": "",
            "Entrypoint": [
                "/start.sh"
            ],
            "OnBuild": null,
            "Labels": {}
        },
        "NetworkSettings": {
            "Bridge": "",
            "SandboxID": "**************************************************",
            "HairpinMode": false,
            "LinkLocalIPv6Address": "",
            "LinkLocalIPv6PrefixLen": 0,
            "Ports": {},
            "SandboxKey": "/var/run/docker/netns/**************************",
            "SecondaryIPAddresses": null,
            "SecondaryIPv6Addresses": null,
            "EndpointID": "",
            "Gateway": "",
            "GlobalIPv6Address": "",
            "GlobalIPv6PrefixLen": 0,
            "IPAddress": "",
            "IPPrefixLen": 0,
            "IPv6Gateway": "",
            "MacAddress": "",
            "Networks": {
                "bridge": {
                    "IPAMConfig": null,
                    "Links": null,
                    "Aliases": null,
                    "NetworkID": `"d0746b91404ef28d65a6*************************************************",`
                    "EndpointID": "",
                    "Gateway": "",
                    "IPAddress": "",
                    "IPPrefixLen": 0,
                    "IPv6Gateway": "",
                    "GlobalIPv6Address": "",
                    "GlobalIPv6PrefixLen": 0,
                    "MacAddress": "",
                    "DriverOpts": null
                },
                "nextcloud-aio": {
                    "IPAMConfig": null,
                    "Links": null,
                    "Aliases": [
                        "bd2cdc8225c5"
                    ],
                    "NetworkID": "1c7a684c9734589c532119961f96b5de9273ec3f8a626a4efdaa255ee7aab483",
                    "EndpointID": "",
                    "Gateway": "",
                    "IPAddress": "",
                    "IPPrefixLen": 0,
                    "IPv6Gateway": "",
                    "GlobalIPv6Address": "",
                    "GlobalIPv6PrefixLen": 0,
                    "MacAddress": "",
                    "DriverOpts": null
                }
            }
        }
    }
]

3 replies

DaleJP May 12, 2022
Author

Does this help?
I tried to ************* anything that seemed private but I can't stress enough how little I know about this stuff.

DaleJP May 12, 2022
Author

<?php
$CONFIG = array (
  'memcache.local' => '\\OC\\Memcache\\APCu',
  'apps_paths' =>
  array (
    0 =>
    array (
      'path' => '/var/www/html/apps',
      'url' => '/apps',
      'writable' => false,
    ),
    1 =>
    array (
      'path' => '/var/www/html/custom_apps',
      'url' => '/custom_apps',
      'writable' => true,
    ),
  ),
  'memcache.distributed' => '\\OC\\Memcache\\Redis',
  'memcache.locking' => '\\OC\\Memcache\\Redis',
  'redis' =>
  array (
    'host' => 'nextcloud-aio-redis',
    'password' => '*************************************',
    'port' => 6379,
  ),
  'overwritehost' => 'cloud.**************.jp',
  'overwriteprotocol' => 'https',
  'passwordsalt' => '*****************************************',
  'secret' => '**********************************************',
  'trusted_domains' =>
  array (
    0 => 'localhost',
    1 => 'cloud.***************.jp',
  ),
  'datadirectory' => '/mnt/ncdata',
  'dbtype' => 'pgsql',
  'version' => '23.0.4.1',
  'overwrite.cli.url' => 'https://cloud.*********************.jp/',
  'dbname' => 'nextcloud_database',
  'dbhost' => 'nextcloud-aio-database',
  'dbport' => '',
  'dbtableprefix' => 'oc_',
  'dbuser' => 'oc_nextcloud',
  'dbpassword' => '************************************************',
  'installed' => true,
  'instanceid' => 'oczugq7px6oj',
  'loglevel' => '2',
  'log_type' => 'file',
  'logfile' => '/var/log/nextcloud/nextcloud.log',
  'log_rotate_size' => '10485760',
  'log.condition' =>
  array (
    'apps' =>
    array (
      0 => 'admin_audit',
    ),
  ),
  'preview_max_x' => '2048',
  'preview_max_y' => '2048',
  'jpeg_quality' => '60',
  'enabledPreviewProviders' =>
  array (
    1 => 'OC\\Preview\\Image',
    2 => 'OC\\Preview\\MarkDown',
    3 => 'OC\\Preview\\MP3',

DaleJP May 12, 2022
Author

Sorry, I kept finding sensitive data. I'm half asleep today.

szaimen · 2022-05-12T05:47:20Z

szaimen
May 12, 2022
Maintainer

You need to use your domain cloud.***************.jp to connect to your Nextcloud even in your LAN. However what you can do in order to make access faster is install a local dns server like a pihole that automatically points to the local ip-address of your Nextcloud when accessing your domain inside your LAN.

0 replies

DaleJP · 2022-05-12T05:58:18Z

DaleJP
May 12, 2022
Author

Aaaaah I see.Yes, that is what I want to do. I was just testing that the local lan would work before installing and setting up PiHole. When I saw that it wouldn’t work in the browser, I assumed it wouldn’t work with PiHole.I’ll give it a try. Thanks again. Sent from Mail for Windows From: Simon L.Sent: 12 May 2022 14:47To: nextcloud/all-in-oneCc: DaleJP; AuthorSubject: Re: [nextcloud/all-in-one] Internal LAN access - I think I'm being dumb (Discussion #618) You need to use your domain cloud.***************.jp to connect to your Nextcloud even in your LAN. However what you can do in order to make access faster is install a local dns server like a pihole that automatically points to the local ip-address of your Nextcloud when accessing your domain inside your LAN.—Reply to this email directly, view it on GitHub, or unsubscribe.You are receiving this because you authored the thread.Message ID: ***@***.***>

0 replies

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Internal LAN access - I think I'm being dumb #618

{{title}}

Replies: 7 comments 3 replies

{{title}}

{{title}}

{{title}}

{{title}}

{{title}}

{{title}}

{{title}}

{{title}}

{{title}}

{{title}}

Select a reply

Internal LAN access - I think I'm being dumb #618

DaleJP May 11, 2022

Replies: 7 comments · 3 replies

szaimen May 11, 2022 Maintainer

DaleJP May 12, 2022 Author

DaleJP May 12, 2022 Author

DaleJP May 12, 2022 Author

DaleJP May 12, 2022 Author

DaleJP May 12, 2022 Author

DaleJP May 12, 2022 Author

DaleJP May 12, 2022 Author

szaimen May 12, 2022 Maintainer

DaleJP May 12, 2022 Author

DaleJP
May 11, 2022

Replies: 7 comments 3 replies

szaimen
May 11, 2022
Maintainer

DaleJP
May 12, 2022
Author

DaleJP
May 12, 2022
Author

DaleJP
May 12, 2022
Author

DaleJP
May 12, 2022
Author

DaleJP May 12, 2022
Author

DaleJP May 12, 2022
Author

DaleJP May 12, 2022
Author

szaimen
May 12, 2022
Maintainer

DaleJP
May 12, 2022
Author