I have successfully setup Nextcloud (using postgres backend) and everything works ok, but now I would like Serve this docker container to Tailscale.

I'm followe SpaceInvaders tutorial for this from the link below (up until the https part, which i figured Tailscale would take care of) and the Tailscale video from Spaceinvader (which was excellent) where he publishes Jellyfin.

 

However, when I enable Tailscale on the container (see settings below) and start the machine the container logs start spamming:

nginx: [emerg] bind() to [::]:443 failed (98: Address in use)
nginx: [emerg] bind() to 0.0.0.0:443 failed (98: Address in use)
nginx: [emerg] bind() to [::]:443 failed (98: Address in use)
nginx: [emerg] bind() to 0.0.0.0:443 failed (98: Address in use)

 

endlessly and I can't get to the WebUI.  Again, if i disable TS it works.

 

What am I doing wrong?  by my read of the settings I set the port to 444

 

I also tried following this to modify the config.php to add the TS IP but it didn't seem to work.  Is it something to do I guess with TS advanced settings:

 

 

 

 

 

 

Were you able to resolve this? I'm having the same problem, though I am assigning a fixed IP on a custom network/VLAN. I also tried the suggestion from reddit but the problem still persists.

@lazant @darwinsbeard Did either of you ever solve this? Third person having the same problem, checking in.

No not yet, having other major issues with unraid atm...

I also put this on the backburner for a bit because one thing I'm not even sure about (for my situation) is what the advantage of even having NC on tailscale at all, *assuming that the only way to connect with it is from a client on my tailnet*.  My main use case would be to use for myself between my personal computers and my work computer, but my work computer won't allow TS to be installed so not sure why even to bother (unless I just open it up completely but that brings other issues and defeats the purpose of TS....as I understand it.  Unless I'm missing something...?

My Nextcloud environment on unRAID has been running well for years, I run the lsio variant and have Collabora running as an extra Docker.

In the meantime, I have switched all dockers that I want to reach from outside my network to tailscale. To be able to switch off port forwarding and NPM, it would now be the turn of these two dockers. I have the same settings as the topic creator and get the same error messages. I have also adapted my config.php:

 

<?php
$CONFIG = array (
  'datadirectory' => '/data',
  'instanceid' => 'xxxxxxxxxxxxxxxxxxxxxx',
  'passwordsalt' => 'xxxxxxxxxxxxxxxxxxxxxx',
  'secret' => 'xxxxxxxxxxxxxxxxxxxxxx',
  'trusted_proxies' => 
  array (
    0 => 'xxx.xxx.xxx.xxx',
  ),
  'trusted_domains' => 
  array (
    0 => 'xxx.xxx.xxx.xxx:444',
    1 => 'mynetwork.com',
    2 => '100.xxx.xxx.xxx:444',
    3 => 'nextcloud.tailscalenetwork.ts.net',
  ),
  'overwrite.cli.url' => 'https://mynetwork.com',
  'overwritehost' => 'mynetwork.com',
  'overwriteprotocol' => 'https',
  'dbtype' => 'mysql',
  'version' => '31.0.2.1',
  'dbname' => 'nextcloud',
  'dbhost' => 'xxx.xxx.xxx.xxx:3306',
  'dbport' => '',
  'dbtableprefix' => 'oc_',
  'dbuser' => 'xxxxxxxxxxxxxxxxxxxxxx',
  'dbpassword' => 'xxxxxxxxxxxxxxxxxxxxxx',
  'allow_local_remote_servers' => true,
  'auth.bruteforce.protection.enabled' => true,
  'ratelimit.protection.enabled' => true,
  'default_language' => 'de_DE',
  'default_locale' => 'de',
  'default_phone_region' => 'CH',
  'mysql.utf8mb4' => true,
  'installed' => true,
  'maintenance' => false,
  'defaultapp' => 'files',
  'knowledgebaseenabled' => true,
  'enable_avatars' => true,
  'allow_user_to_change_display_name' => true,
  'loglevel' => 3,
  'logfile' => '/config/nextcloud.log',
  'logfilemode' => 416,
  'logtimezone' => 'Europe/Berlin',
  'appstoreenabled' => true,
  'updater.release.channel' => 'stable',
  'updater.server.url' => 'https://updates.nextcloud.com/updater_server/',
  'theme' => '',
  'mail_smtpmode' => 'smtp',
  'mail_smtpsecure' => 'tls',
  'mail_smtpauthtype' => 'LOGIN',
  'ldapIgnoreNamingRules' => false,
  'encryption.legacy_format_support' => false,
  'encryption.key_storage_migrated' => false,
  'mail_from_address' => 'xxxxxxxxxxxxxxxxxxxxxx',
  'mail_sendmailmode' => 'smtp',
  'mail_domain' => 'xxxxxxxxxxxxxxxxxxxxxx',
  'mail_smtphost' => 'xxxxxxxxxxxxxxxxxxxxxx',
  'mail_smtpport' => '587',
  'mail_smtpauth' => 1,
  'mail_smtpname' => 'xxxxxxxxxxxxxxxxxxxxxx',
  'mail_smtppassword' => 'xxxxxxxxxxxxxxxxxxxxxx',
  'memcache.local' => '\\OC\\Memcache\\APCu',
  'memcache.distributed' => '\\OC\\Memcache\\Redis',
  'memcache.locking' => '\\OC\\Memcache\\Redis',
  'redis' => 
  array (
    'host' => 'xxx.xxx.xxx.xxx',
    'port' => 6379,
  ),
  'filelocking.enabled' => 'true',
  'updater.secret' => 'xxxxxxxxxxxxxxxxxxxxxx',
  'memories.exiftool' => '/config/www/nextcloud/apps/memories/exiftool-bin/exiftool-amd64-musl',
  'memories.vod.path' => '/config/www/nextcloud/apps/memories/exiftool-bin/go-vod-amd64',
  'memories.vod.ffmpeg' => '/usr/bin/ffmpeg',
  'memories.vod.ffprobe' => '/usr/bin/ffprobe',
  'enable_previews' => true,
  'enabledPreviewProviders' => 
  array (
    1 => 'OC\\Preview\\HEIC',
    2 => 'OC\\Preview\\PDF',
    3 => 'OC\\Preview\\XBitmap',
    4 => 'OC\\Preview\\PNG',
    5 => 'OC\\Preview\\Image',
    6 => 'OC\\Preview\\Photoshop',
    7 => 'OC\\Preview\\TIFF',
    8 => 'OC\\Preview\\SVG',
    9 => 'OC\\Preview\\BMP',
    10 => 'OC\\Preview\\GIF',
    11 => 'OC\\Preview\\JPEG',
  ),
  'memories.index.path' => '/fotos/',
  'upgrade.disable-web' => true,
  'maintenance_window_start' => 1,
  'app_install_overwrite' => 
  array (
    0 => 'imageconverter',
    1 => 'talk_simple_poll',
    2 => 'unsplash',
    3 => 'groupfolders',
    4 => 'integration_collaboard',
    5 => 'tasks',
  ),
);

 

Maybe it's important to modify  overwrite.cli.url and overwritehost as well?

I'm in the same boat and have not figured it out yet. I setup Tailscale in several other containers, but running into this same issue when trying to enable it for Nextcloud.

The error occurs when using the linuxserver nextcloud image.
This image configures its nginx reverse proxy to listen on 443, which you can then bind to a host port for the usual WebUI.

Tailscale serve also tries to forward a targe portt to port 443, hence the clash.

So you have two options:

1. configure tailscale (via the advanced setting Tailscale Serve Protocol Port) to forward the target port to a different port, e.g. 444, and append that port to your tailscale url.

2. make nginx not listen on 443 and configure tailscale to forward port 80 to 443.
   This means that the regular WebUI will only be accessible via http, but you won't need to append a port to your tailscale url.

To do this you need the following:

1. set Tailscale Serve Port to 80

2. comment out or delete the two lines configuring nginx 443 listeners in /mnt/user/appdata/nextcloud/nginx/site-confs/default.conf
   Should look something like:

   
   ```
   ...
   server {
   listen 80 default_server;
   listen [::]:80 default_server;
   # listen 443 ssl default_server;
   # listen [::]:443 ssl default_server;
   ...
   ```

3. run the nextcloud web installer

4. add the other url to your trusted domains config, i.e. if you ran the installer via the tailscale url, add the regular WebUI IP:PORT to the trusted domains, otherwise add the tailscale url. You need to add a new entry to the trusted_domains settings in /mnt/user/appdata/nextcloud/www/nextcloud/config/config.php.
   The initial number is the index, so you need to increment that by one.
   Should look like:
   
   ```
   'trusted_domains' =>
   array (
   0 => <unraid ip>:<the webui port you configured>,
   1 => nextcloud.yourtailnet.ts.net,
   ),
   ```
   
   

On 6/23/2025 at 1:00 AM, lrmn said:

The error occurs when using the linuxserver nextcloud image.
This image configures its nginx reverse proxy to listen on 443, which you can then bind to a host port for the usual WebUI.

Tailscale serve also tries to forward a targe portt to port 443, hence the clash.

So you have two options:

1. configure tailscale (via the advanced setting Tailscale Serve Protocol Port) to forward the target port to a different port, e.g. 444, and append that port to your tailscale url.

2. make nginx not listen on 443 and configure tailscale to forward port 80 to 443.
   This means that the regular WebUI will only be accessible via http, but you won't need to append a port to your tailscale url.

To do this you need the following:

1. set Tailscale Serve Port to 80

2. comment out or delete the two lines configuring nginx 443 listeners in /mnt/user/appdata/nextcloud/nginx/site-confs/default.conf
   Should look something like:

   
   ```
   ...
   server {
   listen 80 default_server;
   listen [::]:80 default_server;
   # listen 443 ssl default_server;
   # listen [::]:443 ssl default_server;
   ...
   ```

3. run the nextcloud web installer

4. add the other url to your trusted domains config, i.e. if you ran the installer via the tailscale url, add the regular WebUI IP:PORT to the trusted domains, otherwise add the tailscale url. You need to add a new entry to the trusted_domains settings in /mnt/user/appdata/nextcloud/www/nextcloud/config/config.php.
   The initial number is the index, so you need to increment that by one.
   Should look like:
   
   ```
   'trusted_domains' =>
   array (
   0 => <unraid ip>:<the webui port you configured>,
   1 => nextcloud.yourtailnet.ts.net,
   ),
   ```
   
   

Great @Irmn I am going to check this out as soon as I am having a little bit of time. Question: I was hoping to get rid of NGINX?