Skip to content

Trusted Proxy error on boot #2145

Description

@Glujaz

System information

NextcloudPi version v1.58.0
NextcloudPi image NextcloudPi_lxc_07-27-25
OS Debian GNU/Linux 13 (trixie). 6.12.105-production+truenas (x86_64)
automount no
USB devices none
datadir /opt/ncdata/data
data in SD yes
data filesystem zfs
data disk usage 26G/647G
rootfs usage 26G/647G
swapfile none
dbdir /var/lib/mysql
Nextcloud check ok
Nextcloud version 35.0.1.1
HTTPD service up
PHP service up
MariaDB service up
Redis service up
HPB service up
Postfix service up
Internet check ok
Public IPv4 REMOVED SENSITIVE VALUE
Public IPv6 REMOVED SENSITIVE VALUE
Port 80 open
Port 443 open
IP REMOVED SENSITIVE VALUE
Gateway REMOVED SENSITIVE VALUE
Interface eth0
Certificates REMOVED SENSITIVE VALUE
NAT loopback no
Uptime 2min

Issue

During boot sequence, NCP is trying to get an IP for a domain. It seems to be asking this to quickly, and is pasting this in the trusted proxies section of the nextcloud config file :

'trusted_proxies' => array (
0 => '10.0.50.10',
1 => '127.0.0.1', 2 => '::1',
11 => '127.0.0.1',
12 => '::1',
14 => ';; communications error to 10.0.50.1#53: host unreachable ;; communications error to 10.0.50.1#53: host unreachable 10.0.50.20', ),

It is fully reachable at some point, and I am able to do a manual "dig".

The quick fix is to find :

local domain_ip="$(dig +short "${host}")"
[[ -z "$domain_ip" ]] || ncc config:system:set trusted_proxies 14 --value="$(dig +short "${host}")"

In /usr/local/etc/library.sh, and replace it with this :

local domain_ip="$(dig +short A "${host}" 2>/dev/null | grep -E '^[0-9]+\.[0-9]+\.[0-9]+\.[0-9]+$' | head -n1)"
[[ -z "$domain_ip" ]] || ncc config:system:set trusted_proxies 14 --value="$domain_ip"

I will propose a fix to the code myself.

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions