CyprienDlp

Thank you for your help and for taking the time to build and support this script. I’ve attempted fresh installs multiple times, but Step 5 (TLS/connectivity) consistently fails. One thing I noticed is that the OpenCloud container is created with the name "OpenCloud" (capitalized), while the SWAG configuration templates reference it as opencloud. I’ve tried adjusting the capitalization in both the container and config files, but the issue persists. Since I’m not deeply familiar with SWAG, I suspect my configuration might be incorrect. I followed the guide, but I’m unsure if I’ve missed any prerequisites—such as proper certificate paths, NGINX proxy settings, or DNS resolution. It would be helpful to have a way to verify that all prerequisites are met before running the script, as I can’t determine whether the problem lies in my setup or in the execution of the guide.

Thanks, I can add the container now. When using the install with Swag what domain name do you put, the one on tailscale or one with any domain name I own? I might need to restart the install, I can't get the container running. If that helps here are the logs I got: Logs

I see, trying you script then thanks! While trying to set it up collabora and collaboration container seem fine but not opencloud Is it expected to output like this and I should add the keys for this one? Here is the opencloud.xml <?xml version="1.0"?> <Container version="2"> <Name>OpenCloud</Name> <Repository>opencloudeu/opencloud-rolling:latest</Repository> <Registry>https://hub.docker.com/r/opencloudeu/opencloud-rolling</Registry> <Network>opencloud-net</Network> <MyIP/> <Shell>sh</Shell> <Privileged>false</Privileged> <Support>https://docs.opencloud.eu/</Support> <Project>https://github.com/opencloud-eu/opencloud</Project> <Overview>OpenCloud - Cloud storage and collaboration platform with document editing capabilities through Collabora Online integration.</Overview> <Category>Cloud: Productivity: Tools:</Category> <WebUI>https://opencloud.yourdomain.com</WebUI> <TemplateURL/> <Icon>https://raw.githubusercontent.com/Nemuritor01/Unraid-Templates/refs/heads/main/templates/docker-icons/opencloud.png</Icon> <ExtraParams>--entrypoint=/bin/sh</ExtraParams> <PostArgs>-c "opencloud init || true; opencloud server"</PostArgs> <CPUset/> </DateInstalled> <DonateText/> <DonateLink/> <Requires/> <Config Name="WebUI Port" Target="9200" Default="9200" Mode="tcp" Description="OpenCloud HTTP Port" Type="Port" Display="always" Required="true" Mask="false">9200</Config> <Config Name="Config Directory" Target="/etc/opencloud" Default="/mnt/user/appdata/opencloud/config" Mode="rw" Description="OpenCloud configuration directory" Type="Path" Display="always" Required="true" Mask="false">/mnt/user/appdata/opencloud/config</Config> <Config Name="Data Directory" Target="/var/lib/opencloud" Default="/mnt/user/appdata/opencloud/data" Mode="rw" Description="OpenCloud data directory" Type="Path" Display="always" Required="true" Mask="false">/mnt/user/appdata/opencloud/data</Config> <Config Name="Apps Directory" Target="/var/lib/opencloud/web/assets/apps" Default="/mnt/user/appdata/opencloud/apps" Mode="rw" Description="OpenCloud web extensions directory" Type="Path" Display="always" Required="true" Mask="false">/mnt/user/appdata/opencloud/apps</Config> <Config Name="IDM_ADMIN_PASSWORD" Target="IDM_ADMIN_PASSWORD" Default="" Mode="" Description="Admin password (required for first init)" Type="Variable" Display="always" Required="true" Mask="true">YourSecurePassword</Config> <Config Name="OC_INSECURE" Target="OC_INSECURE" Default="true" Mode="" Description="Skip certificate validation" Type="Variable" Display="always" Required="true" Mask="false">true</Config> <Config Name="PROXY_HTTP_ADDR" Target="PROXY_HTTP_ADDR" Default="0.0.0.0:9200" Mode="" Description="HTTP listening address" Type="Variable" Display="always" Required="true" Mask="false">0.0.0.0:9200</Config> <Config Name="OC_URL" Target="OC_URL" Default="https://opencloud.yourdomain.com" Mode="" Description="OpenCloud public URL" Type="Variable" Display="always" Required="true" Mask="false">https://opencloud.yourdomain.com</Config> <Config Name="Radicale Proxy Config File" Target="/etc/opencloud/proxy.yaml" Default="" Mode="rw" Description="" Type="Path" Display="advanced" Required="false" Mask="false">/mnt/user/appdata/opencloud/config/proxy.yaml</Config> <Config Name="Micro-Registry-Address" Target="9233" Default="9233" Mode="tcp" Description="NATS registry port" Type="Port" Display="advanced" Required="false" Mask="false">9233</Config> <Config Name="GATEWAY_GRPC_PORT" Target="9142" Default="9142" Mode="tcp" Description="Gateway gRPC port" Type="Port" Display="advanced" Required="false" Mask="false">9142</Config> <Config Name="COLLABORA_DOMAIN" Target="COLLABORA_DOMAIN" Default="collabora.yourdomain.com" Mode="" Description="Collabora Online domain" Type="Variable" Display="advanced" Required="false" Mask="false">collabora.yourdomain.com</Config> <Config Name="CSP Config File" Target="/etc/opencloud/csp.yaml" Default="/mnt/user/appdata/opencloud/config/csp.yaml" Mode="rw" Description="Content Security Policy config file" Type="Path" Display="advanced" Required="true" Mask="false">/mnt/user/appdata/opencloud/config/csp.yaml</Config> <Config Name="Banned Passwords File" Target="/etc/opencloud/banned-password-list.txt" Default="/mnt/user/appdata/opencloud/config/banned-password-list.txt" Mode="rw" Description="Banned passwords list file" Type="Path" Display="advanced" Required="true" Mask="false">/mnt/user/appdata/opencloud/config/banned-password-list.txt</Config> <Config Name="OC_LOG_LEVEL" Target="OC_LOG_LEVEL" Default="info" Mode="" Description="Log level (debug, info, warn, error)" Type="Variable" Display="advanced" Required="false" Mask="false">info</Config> <Config Name="OC_LOG_COLOR" Target="OC_LOG_COLOR" Default="false" Mode="" Description="Enable colored logs" Type="Variable" Display="advanced" Required="false" Mask="false">false</Config> <Config Name="OC_LOG_PRETTY" Target="OC_LOG_PRETTY" Default="false" Mode="" Description="Enable pretty printed logs" Type="Variable" Display="advanced" Required="false" Mask="false">false</Config> <Config Name="PROXY_TLS" Target="PROXY_TLS" Default="false" Mode="" Description="Use TLS between reverse proxy and OpenCloud" Type="Variable" Display="advanced" Required="false" Mask="false">false</Config> <Config Name="PROXY_ENABLE_BASIC_AUTH" Target="PROXY_ENABLE_BASIC_AUTH" Default="false" Mode="" Description="Enable basic authentication" Type="Variable" Display="advanced" Required="false" Mask="false">false</Config> <Config Name="PROXY_CSP_CONFIG_FILE_LOCATION" Target="PROXY_CSP_CONFIG_FILE_LOCATION" Default="/etc/opencloud/csp.yaml" Mode="" Description="CSP config file location" Type="Variable" Display="advanced" Required="false" Mask="false">/etc/opencloud/csp.yaml</Config> <Config Name="GATEWAY_GRPC_ADDR" Target="GATEWAY_GRPC_ADDR" Default="0.0.0.0:9142" Mode="" Description="Gateway gRPC address" Type="Variable" Display="advanced" Required="false" Mask="false">0.0.0.0:9142</Config> <Config Name="NATS_NATS_HOST" Target="NATS_NATS_HOST" Default="0.0.0.0" Mode="" Description="NATS host address" Type="Variable" Display="advanced" Required="false" Mask="false">0.0.0.0</Config> <Config Name="IDM_CREATE_DEMO_USERS" Target="IDM_CREATE_DEMO_USERS" Default="false" Mode="" Description="Create demo users (not for production)" Type="Variable" Display="advanced" Required="false" Mask="false">false</Config> <Config Name="FRONTEND_ARCHIVER_MAX_SIZE" Target="FRONTEND_ARCHIVER_MAX_SIZE" Default="10000000000" Mode="" Description="Max archive size in bytes" Type="Variable" Display="advanced" Required="false" Mask="false">10000000000</Config> <Config Name="FRONTEND_CHECK_FOR_UPDATES" Target="FRONTEND_CHECK_FOR_UPDATES" Default="true" Mode="" Description="Check for updates" Type="Variable" Display="advanced" Required="false" Mask="false">true</Config> <Config Name="FRONTEND_APP_HANDLER_SECURE_VIEW_APP_ADDR" Target="FRONTEND_APP_HANDLER_SECURE_VIEW_APP_ADDR" Default="eu.opencloud.api.collaboration" Mode="" Description="Secure view app address" Type="Variable" Display="advanced" Required="false" Mask="false">eu.opencloud.api.collaboration</Config> <Config Name="OC_PASSWORD_POLICY_BANNED_PASSWORDS_LIST" Target="OC_PASSWORD_POLICY_BANNED_PASSWORDS_LIST" Default="banned-password-list.txt" Mode="" Description="Banned passwords list file" Type="Variable" Display="advanced" Required="false" Mask="false">banned-password-list.txt</Config> <Config Name="OC_PASSWORD_POLICY_DISABLED" Target="OC_PASSWORD_POLICY_DISABLED" Default="false" Mode="" Description="Disable password policy" Type="Variable" Display="advanced" Required="false" Mask="false">false</Config> <Config Name="OC_PASSWORD_POLICY_MIN_CHARACTERS" Target="OC_PASSWORD_POLICY_MIN_CHARACTERS" Default="8" Mode="" Description="Minimum password length" Type="Variable" Display="advanced" Required="false" Mask="false">8</Config> <Config Name="OC_PASSWORD_POLICY_MIN_LOWERCASE_CHARACTERS" Target="OC_PASSWORD_POLICY_MIN_LOWERCASE_CHARACTERS" Default="1" Mode="" Description="Minimum lowercase characters" Type="Variable" Display="advanced" Required="false" Mask="false">1</Config> <Config Name="OC_PASSWORD_POLICY_MIN_UPPERCASE_CHARACTERS" Target="OC_PASSWORD_POLICY_MIN_UPPERCASE_CHARACTERS" Default="1" Mode="" Description="Minimum uppercase characters" Type="Variable" Display="advanced" Required="false" Mask="false">1</Config> <Config Name="OC_PASSWORD_POLICY_MIN_DIGITS" Target="OC_PASSWORD_POLICY_MIN_DIGITS" Default="1" Mode="" Description="Minimum digits" Type="Variable" Display="advanced" Required="false" Mask="false">1</Config> <Config Name="OC_PASSWORD_POLICY_MIN_SPECIAL_CHARACTERS" Target="OC_PASSWORD_POLICY_MIN_SPECIAL_CHARACTERS" Default="1" Mode="" Description="Minimum special characters" Type="Variable" Display="advanced" Required="false" Mask="false">1</Config> <Config Name="OC_SHARING_PUBLIC_SHARE_MUST_HAVE_PASSWORD" Target="OC_SHARING_PUBLIC_SHARE_MUST_HAVE_PASSWORD" Default="true" Mode="" Description="Require password for public shares" Type="Variable" Display="advanced" Required="false" Mask="false">true</Config> <Config Name="OC_SHARING_PUBLIC_WRITEABLE_SHARE_MUST_HAVE_PASSWORD" Target="OC_SHARING_PUBLIC_WRITEABLE_SHARE_MUST_HAVE_PASSWORD" Default="true" Mode="" Description="Require password for writeable public shares" Type="Variable" Display="advanced" Required="false" Mask="false">true</Config> <Config Name="GRAPH_AVAILABLE_ROLES" Target="GRAPH_AVAILABLE_ROLES" Default="b1e2218d-eef8-4d4c-b82d-0f1a1b48f3b5,a8d5fe5e-96e3-418d-825b-534dbdf22b99,fb6c3e19-e378-47e5-b277-9732f9de6e21,58c63c02-1d89-4572-916a-870abc5a1b7d,2d00ce52-1fc2-4dbc-8b95-a73b73395f5a,1c996275-f1c9-4e71-abdf-a42f6495e960,312c0871-5ef7-4b3a-85b6-0e4074c64049,aa97fe03-7980-45ac-9e50-b325749fd7e6" Mode="" Description="Available Graph roles" Type="Variable" Display="advanced" Required="false" Mask="false">b1e2218d-eef8-4d4c-b82d-0f1a1b48f3b5,a8d5fe5e-96e3-418d-825b-534dbdf22b99,fb6c3e19-e378-47e5-b277-9732f9de6e21,58c63c02-1d89-4572-916a-870abc5a1b7d,2d00ce52-1fc2-4dbc-8b95-a73b73395f5a,1c996275-f1c9-4e71-abdf-a42f6495e960,312c0871-5ef7-4b3a-85b6-0e4074c64049,aa97fe03-7980-45ac-9e50-b325749fd7e6</Config> <Config Name="OC_ADD_RUN_SERVICES" Target="OC_ADD_RUN_SERVICES" Default="" Mode="" Description="Additional services to start" Type="Variable" Display="advanced" Required="false" Mask="false"/> <Config Name="NOTIFICATIONS_SMTP_HOST" Target="NOTIFICATIONS_SMTP_HOST" Default="" Mode="" Description="SMTP server hostname" Type="Variable" Display="advanced" Required="false" Mask="false"/> <Config Name="NOTIFICATIONS_SMTP_PORT" Target="NOTIFICATIONS_SMTP_PORT" Default="" Mode="" Description="SMTP server port" Type="Variable" Display="advanced" Required="false" Mask="false"/> <Config Name="NOTIFICATIONS_SMTP_SENDER" Target="NOTIFICATIONS_SMTP_SENDER" Default="[email protected]" Mode="" Description="SMTP sender email" Type="Variable" Display="advanced" Required="false" Mask="false">[email protected]</Config> <Config Name="NOTIFICATIONS_SMTP_USERNAME" Target="NOTIFICATIONS_SMTP_USERNAME" Default="" Mode="" Description="SMTP username" Type="Variable" Display="advanced" Required="false" Mask="false"/> <Config Name="NOTIFICATIONS_SMTP_PASSWORD" Target="NOTIFICATIONS_SMTP_PASSWORD" Default="" Mode="" Description="SMTP password" Type="Variable" Display="advanced" Required="false" Mask="true"/> <Config Name="NOTIFICATIONS_SMTP_INSECURE" Target="NOTIFICATIONS_SMTP_INSECURE" Default="" Mode="" Description="Allow insecure SMTP" Type="Variable" Display="advanced" Required="false" Mask="false"/> <Config Name="NOTIFICATIONS_SMTP_AUTHENTICATION" Target="NOTIFICATIONS_SMTP_AUTHENTICATION" Default="" Mode="" Description="SMTP authentication method" Type="Variable" Display="advanced" Required="false" Mask="false"/> <Config Name="NOTIFICATIONS_SMTP_ENCRYPTION" Target="NOTIFICATIONS_SMTP_ENCRYPTION" Default="none" Mode="" Description="SMTP encryption (none, starttls, ssltls)" Type="Variable" Display="advanced" Required="false" Mask="false">none</Config> <TailscaleStateDir/> </Container>

Hello, Trying to implement your approach I implemented these steps (added some details maybe it would help others too). I tried both apps from mcreekmore and joly0 Ran this command: mkdir -p /mnt/user/appdata/opencloud/config /mnt/user/opencloud/data chmod 751 /mnt/user/appdata/opencloud/config /mnt/user/opencloud/data chown -R 1000:1000 /mnt/user/appdata/opencloud/config /mnt/user/opencloud/data Install the App on Unraid and set the parameter Initialize the 1st time Here I'm stuck on mcreekmore app I remove the init post argument as indicated but it doesn't want to start anyway. On the other app it fine. {"level":"fatal","service":"opencloud","event":"opencloud: Failed service 'service.SutureService{exec:(func(context.Context) error)(0x558cca9209e0)}' (5.999521 failures of 5.000000), restarting: false, panic: config: Cannot set options after data has been loaded, stacktrace: goroutine 1033 [running]:\ngithub.com/thejerf/suture/v4.(*Supervisor).runService.func2.1()\n\tgithub.com/thejerf/suture/[email protected]/supervisor.go:549 +0x7e\npanic({0x558ccc715800?, 0x558cccf06b50?})\n\truntime/panic.go:783 +0x132\ngithub.com/thejerf/suture/v4.(*Supervisor).runService.func2.2()\n\tgithub.com/thejerf/suture/[email protected]/supervisor.go:566 +0xb1\npanic({0x558ccc715800?, 0x558cccf06b50?})\n\truntime/panic.go:783 +0x132\ngithub.com/gookit/config/v2.(*Config).WithOptions(0x2cd?, {0xc001cc5b30?, 0xc0014da300?, 0xc001cc5b50?})\n\tgithub.com/gookit/config/[email protected]/options.go:192 +0x8b\ngithub.com/gookit/config/v2.WithOptions(...)\n\tgithub.com/gookit/config/[email protected]/options.go:187\ngithub.com/opencloud-eu/opencloud/services/proxy/pkg/middleware.loadCSPConfig({0xc0014da300, 0x2cd, 0x300}, {0x0, 0x0, 0x0})\n\tgithub.com/opencloud-eu/opencloud/services/proxy/pkg/middleware/security.go:28 +0x65\ngithub.com/opencloud-eu/opencloud/services/proxy/pkg/middleware.LoadCSPConfig(0x558ccce164a0?)\n\tgithub.com/opencloud-eu/opencloud/services/proxy/pkg/middleware/security.go:22 +0x2b\ngithub.com/opencloud-eu/opencloud/services/proxy/pkg/command.loadMiddlewares({{{0x558cccf2b490, 0xc001c6f570}, 0x3, {0x0, 0x0}, {0xc00233b400, 0x12, 0x1f4}, {0xc001c6f580, 0x1, ...}, ...}}, ...)\n\tgithub.com/opencloud-eu/opencloud/services/proxy/pkg/command/server.go:329 +0x1209\ngithub.com/opencloud-eu/opencloud/services/proxy/pkg/command.Server.func2(0xc001b59b00)\n\tgithub.com/opencloud-eu/opencloud/services/proxy/pkg/command/server.go:189 +0x19b0\ngithub.com/urfave/cli/v2.(*Command).Run(0xc002001600, 0xc001b59b00, {0xc001c6e380, 0x1, 0x1})\n\tgithub.com/urfave/cli/[email protected]/command.go:276 +0x7c2\ngithub.com/urfave/cli/v2.(*Command).Run(0xc002001b80, 0xc001b59a40, {0xc000052240, 0x2, 0x2})\n\tgithub.com/urfave/cli/[email protected]/command.go:269 +0xa30\ngithub.com/urfave/cli/v2.(*App).RunContext(0xc002206200, {0x558cccf3da70, 0xc0019329b0}, {0xc000052240, 0x2, 0x2})\n\tgithub.com/urfave/cli/[email protected]/app.go:333 +0x5a5\ngithub.com/opencloud-eu/opencloud/services/proxy/pkg/command.Execute(0xc0022a1c08)\n\tgithub.com/opencloud-eu/opencloud/services/proxy/pkg/command/root.go:33 +0xca\ngithub.com/opencloud-eu/opencloud/opencloud/pkg/runtime/service.NewService.func32({0x558cccf3da70?, 0xc0019329b0?}, 0x0?)\n\tgithub.com/opencloud-eu/opencloud/opencloud/pkg/runtime/service/service.go:290 +0x7c\ngithub.com/opencloud-eu/opencloud/opencloud/pkg/runtime/service.NewService.NewService.func1.NewSutureServiceBuilder.func77.1({0x558cccf3da70?, 0xc0019329b0?})\n\tgithub.com/opencloud-eu/opencloud/opencloud/pkg/runtime/service/sutureservice.go:20 +0x25\ngithub.com/opencloud-eu/opencloud/opencloud/pkg/runtime/service.SutureService.Serve({0x0?}, {0x558cccf3da70?, 0xc0019329b0?})\n\tgithub.com/opencloud-eu/opencloud/opencloud/pkg/runtime/service/sutureservice.go:28 +0x26\ngithub.com/thejerf/suture/v4.(*Supervisor).runService.func2()\n\tgithub.com/thejerf/suture/[email protected]/supervisor.go:570 +0xd8\ncreated by github.com/thejerf/suture/v4.(*Supervisor).runService in goroutine 93\n\tgithub.com/thejerf/suture/[email protected]/supervisor.go:544 +0x18b\n","service":"service.SutureService{exec:(func(context.Context) error)(0x558cca9209e0)}","supervisor":"opencloud","restarting":false,"failures":5.999521138158495,"threshold":5,"message":"config: Cannot set options after data has been loaded","time":"2026-01-27T22:54:27Z","message":"service panic"}Setting > Label Manager > Opencloud > Advanced view > Enable HTTPS & Disable TLS Open TDS proxy and authenticate Opencloud Edit container with the tailscale https://opencloud.XXX-XXX.ts.net & changed insecure to False Restarted the container When I log-in I'm getting this same issue : https://github.com/orgs/opencloud-eu/discussions/432 I tried both with insecure enabled and disabled just in case. That's it, any recommendation or should I give up on installing opencloud, maybe try with the script but I'm pretty much into tailscale for every services I build. Thanks in advance for the help!

Really nice script and guide, trying to get open cloud running on my Tailscale network, so I need to find a way without reverse proxy. If I find a way I'll share it here.

Solved my problem ! I just fucked-up my port forwarding (and switching to no-ip might have also solved my error) !

So I have some answer about the Error 522, now I'm pretty sure it's due the ISP configuration. I found out that Duckdns wasn't supported by my ISP. I'm starting to configure it with noip dyndns provider. (Also check your router firewall).

So I am trying to reinstall nextcloud while keeping letsencrypt and mariadb and I still have the same problem. I huess the last solution is tu completly reset the server and try again from scratch. Keeping updated ! Update 1 : I have an error 522 on the domain name and an Internal Server Error on the IP url. I don't have any error on my logs [cont-init.d] 10-adduser: exited 0. [cont-init.d] 20-config: executing... [cont-finish.d] executing container finish scripts... [cont-finish.d] done. [s6-finish] waiting for services. [s6-finish] sending all processes the TERM signal. [s6-finish] sending all processes the KILL signal and exiting. [s6-init] making user provided files available at /var/run/s6/etc...exited 0. [s6-init] ensuring user provided files have correct perms...exited 0. [fix-attrs.d] applying ownership & permissions fixes... [fix-attrs.d] done. [cont-init.d] executing container initialization scripts... [cont-init.d] 10-adduser: executing... usermod: no changes

I followed all the steps, tried first with HTTP (without domain name) and now with domain name, letencrypt is working but on my nextcloud I have an error 522. Does someone have any idea it can come from ? adress : nextcloud.taiaut.fr Edit : Forgot to mention I have a error 500 on my IP nextcloud address and my Nextcloud log doesn't show any error. Edit2 : My Nextcloud log Stack trace: #0 /config/www/nextcloud/3rdparty/doctrine/dbal/lib/Doctrine/DBAL/Connection.php(448): OC\DB\Connection->connect() #1 /config/www/nextcloud/3rdparty/doctrine/dbal/lib/Doctrine/DBAL/Connection.php(410): Doctrine\DBAL\Connection->getDatabasePlatformVersion() #2 /config/www/nextcloud/3rdparty/doctrine/dbal/lib/Doctrine/DBAL/Connection.php(354): Doctrine\DBAL\Connection->detectDatabasePlatform() #3 /config/www/nextcloud/3rdparty/doctrine/dbal/lib/Doctrine/DBAL/Connection.php(710): Doctrine\DBAL\Connection->getDatabasePlatform() #4 /config/www/nextcloud/lib/private/DB/Connection.php(151): Doctrine\DBAL\Connection->setTransactionIsolation(2) #5 /config/www/nextcloud/3rdparty/doctrine/dbal/lib/Doctrine/DBAL/DriverManager.php(181): OC\DB\Connection->__construct(Array, Object(Doctrine\DBAL\Driver\PDOMyS in /config/www/nextcloud/lib/private/DB/Connection.php on line 64

Now I don't know why I made all the steps fine but it is still not working. 2 thing I noted : MongoDB log still show : "WARNING: Access control is not enabled for the database." When I launch Rocket Chat I still have "ERR_CONNECTION_REFUSED"

@mhlnstdt25 I tried you way but I can't manage to start mongoDB on step n°4. Do you have any idea it come from ?