v15.1.0 Beta

[pabzm]

Nextcloud 35.0.3 is included

What's Changed

🏕 New features and other improvements

• use = instead of : for security opts by @Zoey2936 in use = instead of : for security opts #8976
• aio-interface: Persist the bypass/skip URL params in the session by @pabzm in aio-interface: Persist the bypass/skip URL params in the session #8790
• aio-interface: Explain that since AIO 14.3.0 a password is always required for logging in by @pabzm in aio-interface: Explain that since AIO 14.3.0 a password is always required for logging in #8867
• fix(Fulltextsearch): enable init to reap zombie processes by @HalmSascha in fix(Fulltextsearch): enable init to reap zombie processes #8924
• New Maintainer for Community Container local-ai by @KaeTuuN in New Maintainer for Community Container local-ai #8940
• fix(memories): add persistent go-vod cache volume by @pulsejet in fix(memories): add persistent go-vod cache volume #8971
• mastercontainer: print the AIO version to the container logs on startup by @szaimen in mastercontainer: print the AIO version to the container logs on startup #8948
• build(eurooffice): upgrade ubuntu packages via apt-get upgrade by @szaimen in build(eurooffice): upgrade ubuntu packages via apt-get upgrade #8903
• feat(community-containers): add Authelia single sign-on container by @szaimen in feat(community-containers): add Authelia single sign-on container #8973
• feat(AIO-interface): allow choosing either daily or weekly backups by @laurentperrinet in feat(AIO-interface): allow choosing either daily or weekly backups #8852
• fix(Nextcloud): drop global allow_local_remote_servers by @szaimen in fix(Nextcloud): drop global allow_local_remote_servers #9003
• fix(Talk): only expose the Janus API to the signaling server by @szaimen in fix(Talk): only expose the Janus API to the signaling server #9012
• fix(Nextcloud): do not make the php config dirs world-writable by @szaimen in fix(Nextcloud): do not make the php config dirs world-writable #9010
• fix(Collabora): do not expose the conversion API publicly by @szaimen in fix(Collabora): do not expose the conversion API publicly #9014
• fix(AIO-interface): disallow . and .. in additional backup directories by @szaimen in fix(AIO-interface): disallow . and .. in additional backup directories #8864
• refactor(Mastercontainer): read backup weekday in the same style as the other backup options by @szaimen in refactor(Mastercontainer): read backup weekday in the same style as the other backup options #9039
• Revert "fix(Nextcloud): temporarily disable lazy objects during upgrade" by @szaimen in Revert "fix(Nextcloud): temporarily disable lazy objects during upgrade" #8999

🐞 Fixed bugs

• fix(Nextcloud): sync av_stream_max_length with clamav StreamMaxLength by @szaimen in fix(Nextcloud): sync av_stream_max_length with clamav StreamMaxLength #8947
• ci(dependabot): disable cooldown for docker updates by @szaimen in ci(dependabot): disable cooldown for docker updates #9022
• fix(Nextcloud): fetch release signing key from nextcloud.com instead of keyserver by @szaimen in fix(Nextcloud): fetch release signing key from nextcloud.com instead of keyserver #9038

👒 Updated dependencies

• build(deps): bump helm/chart-releaser-action from 1.7.0 to 1.8.0 in /.github/workflows by @dependabot[bot] in build(deps): bump helm/chart-releaser-action from 1.7.0 to 1.8.0 in /.github/workflows #8963
• build(deps): bump astral-sh/setup-uv from 10.3.2 to 10.3.3 in /.github/workflows by @dependabot[bot] in build(deps): bump astral-sh/setup-uv from 10.3.2 to 10.3.3 in /.github/workflows #8968
• Yaml updates by @github-actions[bot] in Yaml updates #8892
• build(deps): bump caddy from 2.11.7-alpine to 2.11.8-alpine in /Containers/apache by @dependabot[bot] in build(deps): bump caddy from 2.11.7-alpine to 2.11.8-alpine in /Containers/apache #8980
• build(deps): bump docker from 29.9.2-cli to 29.9.3-cli in /Containers/mastercontainer by @dependabot[bot] in build(deps): bump docker from 29.9.2-cli to 29.9.3-cli in /Containers/mastercontainer #8981
• [Automated] Update psalm-baseline.xml by @github-actions[bot] in [Automated] Update psalm-baseline.xml #8965
• PHP dependency updates by @github-actions[bot] in PHP dependency updates #8962
• Update test container image references by @github-actions[bot] in Update test container image references #8966
• watchtower container update to v1.24.0 by @github-actions[bot] in watchtower container update to v1.24.0 #8969
• build(deps): bump caddy from 2.11.7-alpine to 2.11.8-alpine in /Containers/mastercontainer by @dependabot[bot] in build(deps): bump caddy from 2.11.7-alpine to 2.11.8-alpine in /Containers/mastercontainer #8982
• build(deps-dev): bump vimeo/psalm from 6.20.10 to 7.0.4 in /php by @dependabot[bot] in build(deps-dev): bump vimeo/psalm from 6.20.10 to 7.0.4 in /php #8975
• Yaml updates by @github-actions[bot] in Yaml updates #8986
• build(deps): bump helm/chart-releaser-action from 1.8.0 to 1.9.0 in /.github/workflows by @dependabot[bot] in build(deps): bump helm/chart-releaser-action from 1.8.0 to 1.9.0 in /.github/workflows #8985
• build(deps): bump caddy from 2.11.8-alpine to 2.11.9-alpine in /Containers/apache by @dependabot[bot] in build(deps): bump caddy from 2.11.8-alpine to 2.11.9-alpine in /Containers/apache #8991
• build(deps): bump caddy from 2.11.8-alpine to 2.11.9-alpine in /Containers/mastercontainer by @dependabot[bot] in build(deps): bump caddy from 2.11.8-alpine to 2.11.9-alpine in /Containers/mastercontainer #8992
• PHP dependency updates by @github-actions[bot] in PHP dependency updates #8984
• [Automated] Update psalm-baseline.xml by @github-actions[bot] in [Automated] Update psalm-baseline.xml #8998
• talk container update by @github-actions[bot] in talk container update #9001
• PHP dependency updates by @github-actions[bot] in PHP dependency updates #9000
• ci: bump codespell and setup-php actions, fix stale version comments by @szaimen in ci: bump codespell and setup-php actions, fix stale version comments #8993
• build(deps): bump collabora/code from 26.04.5.2.1 to 26.04.6.1.1 in /Containers/collabora by @dependabot[bot] in build(deps): bump collabora/code from 26.04.5.2.1 to 26.04.6.1.1 in /Containers/collabora #9016
• build(deps): bump alpine from 3.24.3 to 3.24.4 in /Containers/alpine by @dependabot[bot] in build(deps): bump alpine from 3.24.3 to 3.24.4 in /Containers/alpine #9023
• build(deps): bump httpd from 2.4.69-alpine3.24 to 2.4.70-alpine3.24 in /Containers/apache by @dependabot[bot] in build(deps): bump httpd from 2.4.69-alpine3.24 to 2.4.70-alpine3.24 in /Containers/apache #9025
• build(deps): bump alpine from 3.24.3 to 3.24.4 in /Containers/borgbackup by @dependabot[bot] in build(deps): bump alpine from 3.24.3 to 3.24.4 in /Containers/borgbackup #9026
• build(deps): bump alpine from 3.24.3 to 3.24.4 in /Containers/clamav by @dependabot[bot] in build(deps): bump alpine from 3.24.3 to 3.24.4 in /Containers/clamav #9027
• build(deps): bump alpine from 3.24.3 to 3.24.4 in /Containers/domaincheck by @dependabot[bot] in build(deps): bump alpine from 3.24.3 to 3.24.4 in /Containers/domaincheck #9028
• build(deps): bump alpine from 3.24.3 to 3.24.4 in /Containers/imaginary by @dependabot[bot] in build(deps): bump alpine from 3.24.3 to 3.24.4 in /Containers/imaginary #9029
• build(deps): bump golang from 1.27.3-alpine3.24 to 1.27.4-alpine3.24 in /Containers/imaginary by @dependabot[bot] in build(deps): bump golang from 1.27.3-alpine3.24 to 1.27.4-alpine3.24 in /Containers/imaginary #9030
• build(deps): bump composer from 2.11.1 to 2.11.2 in /Containers/mastercontainer by @dependabot[bot] in build(deps): bump composer from 2.11.1 to 2.11.2 in /Containers/mastercontainer #9031
• build(deps): bump alpine from 3.24.3 to 3.24.4 in /Containers/notify-push by @dependabot[bot] in build(deps): bump alpine from 3.24.3 to 3.24.4 in /Containers/notify-push #9032
• build(deps): bump alpine from 3.24.3 to 3.24.4 in /Containers/talk by @dependabot[bot] in build(deps): bump alpine from 3.24.3 to 3.24.4 in /Containers/talk #9033
• build(deps): bump alpine from 3.24.3 to 3.24.4 in /Containers/watchtower by @dependabot[bot] in build(deps): bump alpine from 3.24.3 to 3.24.4 in /Containers/watchtower #9034
• build(deps): bump golang from 1.27.3-alpine3.24 to 1.27.4-alpine3.24 in /Containers/watchtower by @dependabot[bot] in build(deps): bump golang from 1.27.3-alpine3.24 to 1.27.4-alpine3.24 in /Containers/watchtower #9035
• build(deps): bump softprops/turnstyle from 3.3.3 to 3.3.4 in /.github/workflows by @dependabot[bot] in build(deps): bump softprops/turnstyle from 3.3.3 to 3.3.4 in /.github/workflows #9024
• build(deps): bump strukturag/nextcloud-spreed-signaling from 2.1.1 to 2.2.0 in /Containers/talk by @dependabot[bot] in build(deps): bump strukturag/nextcloud-spreed-signaling from 2.1.1 to 2.2.0 in /Containers/talk #9040
• build(deps): bump httpd from 2.4.70-alpine3.24 to 2.4.71-alpine3.24 in /Containers/apache by @dependabot[bot] in build(deps): bump httpd from 2.4.70-alpine3.24 to 2.4.71-alpine3.24 in /Containers/apache #9041
• build(deps): bump nats from 2.15.2-scratch to 2.15.3-scratch in /Containers/talk by @dependabot[bot] in build(deps): bump nats from 2.15.2-scratch to 2.15.3-scratch in /Containers/talk #9042
• Nextcloud dependency update to 35.0.3 by @github-actions[bot] in Nextcloud dependency update to 35.0.3 #9046
• build(deps): bump peter-evans/create-pull-request from 8.1.1 to 8.1.2 in /.github/workflows by @dependabot[bot] in build(deps): bump peter-evans/create-pull-request from 8.1.1 to 8.1.2 in /.github/workflows #9047
• build(deps): bump softprops/turnstyle from 3.3.4 to 3.3.5 in /.github/workflows by @dependabot[bot] in build(deps): bump softprops/turnstyle from 3.3.4 to 3.3.5 in /.github/workflows #9043
• [Automated] Update psalm-baseline.xml by @github-actions[bot] in [Automated] Update psalm-baseline.xml #9017
• Update test container image references by @github-actions[bot] in Update test container image references #9018
• PHP dependency updates by @github-actions[bot] in PHP dependency updates #9037

📄 Improved documentation

• docs(migration): improve the snap migration guide by @szaimen in docs(migration): improve the snap migration guide #8974

New Contributors

• @HalmSascha made their first contribution in fix(Fulltextsearch): enable init to reap zombie processes #8924
• @KaeTuuN made their first contribution in New Maintainer for Community Container local-ai #8940
• @laurentperrinet made their first contribution in feat(AIO-interface): allow choosing either daily or weekly backups #8852

Full Changelog: v15.0.2...v15.1.0

---

This discussion was created from the release v15.1.0 Beta.

[vawaver]

[AIO v15.1.0 Beta] Euro-Office returns 502 Bad Gateway after upgrade despite healthy containers and working internal healthchecks

Describe the bug

After upgrading my existing Nextcloud AIO installation to v15.1.0 Beta, Euro-Office stopped working.

Euro-Office worked correctly on previous AIO versions with the same deployment and reverse-proxy configuration. The issue appeared immediately after upgrading to v15.1.0 Beta.

All AIO containers, including nextcloud-aio-eurooffice, are running and reported as healthy. However, Nextcloud Office fails to connect to the document server and returns a 502 Bad Gateway error.

I performed several connectivity tests, which confirm that Euro-Office is accessible both directly through the internal Docker network and through the AIO Apache container.

The problem occurs when Nextcloud accesses Euro-Office through the public HTTPS endpoint.

Steps to reproduce

1. Start with an existing Nextcloud AIO installation where Euro-Office is working correctly.

2. Upgrade Nextcloud AIO to v15.1.0 Beta.

3. Start the AIO containers, including Euro-Office.

4. Navigate to Administration settings → Office.

5. Observe that Nextcloud Office cannot connect to the document server and reports a 502 Bad Gateway error.

Expected behavior

Euro-Office should continue working normally after upgrading AIO.

Nextcloud Office should successfully communicate with the Euro-Office document server through the /eurooffice/ endpoint, as it did before the upgrade.

Actual behavior

Nextcloud Office reports:

Error when trying to connect
Server error: GET https://<nextcloud-domain>/eurooffice/healthcheck

resulted in a 502 Bad Gateway response.

The Nextcloud logs also report a server exception related to the Euro-Office healthcheck:

Application: eurooffice

Exception: ServerException

GET https://<nextcloud-domain>/eurooffice/healthcheck

resulted in a 502 Bad Gateway response.

Despite this error, Docker reports the Euro-Office container as healthy.

Environment

• Nextcloud AIO version: 15.1.0 Beta

• Nextcloud version: 35.0.3 (Hub 26 Summer)

• Office integration: Euro-Office

• Euro-Office container image: ghcr.io/nextcloud-releases/aio-eurooffice:beta

• Deployment: Docker / Nextcloud AIO

• Reverse proxy: Existing configuration, unchanged during the upgrade

• Container monitoring: Portainer

Diagnostic results

1. Container health status

The following AIO containers are reported as healthy:

• nextcloud-aio-eurooffice

• nextcloud-aio-apache

• nextcloud-aio-nextcloud

• nextcloud-aio-database

• nextcloud-aio-redis

There are no obvious container startup failures.

2. Euro-Office container logs

Command executed:

sudo docker logs --tail 100 nextcloud-aio-eurooffice

Relevant output:

* Starting PostgreSQL 16 database server

...done.

Postgres schema already present, skipping.

Starting RabbitMQ Messaging Server rabbitmq-server

...done.
Starting redis-server: redis-server.

Starting nginx nginx

...done.

Generating AllFonts.js, please wait...Done

Generating presentation themes, please wait...Done

Generating js caches, please wait...Done

Reloading nginx configuration nginx

...done.

INFO spawned: 'converter' with pid 635

INFO spawned: 'docservice' with pid 636
INFO success: converter entered RUNNING state

INFO success: docservice entered RUNNING state

The container also reports warnings related to Tini and Supervisord, but no obvious service startup failures.

3. Direct Euro-Office connectivity test

I tested connectivity directly from the Nextcloud container to Euro-Office over the internal Docker network.

Command:

sudo docker exec nextcloud-aio-nextcloud 

curl -sS -o /dev/null -w 'HTTP %{http_code}\n' 

http://nextcloud-aio-eurooffice/healthcheck

Result:

HTTP 200

The Euro-Office healthcheck endpoint is reachable directly from the Nextcloud container.

4. Connectivity through AIO Apache

I also tested the Euro-Office healthcheck through the AIO Apache container.

Command:

sudo docker exec nextcloud-aio-nextcloud 

curl -sS -o /dev/null -w 'HTTP %{http_code}\n' 

http://nextcloud-aio-apache:11000/eurooffice/healthcheck

Result:

HTTP 200

The AIO Apache container successfully forwards the internal healthcheck request to Euro-Office.

5. Public HTTPS endpoint

Despite both internal connectivity tests succeeding, Nextcloud Office continues to report:

GET https://<nextcloud-domain>/eurooffice/healthcheck

502 Bad Gateway

Summary of diagnostic results

Component / Test	Result
Euro-Office container	Healthy
AIO Apache container	Healthy
Euro-Office document service	Running
Euro-Office converter	Running
Direct Docker network healthcheck	HTTP 200
Healthcheck through AIO Apache	HTTP 200
Public HTTPS healthcheck	HTTP 502 (reported by Nextcloud Office)
Euro-Office functionality	Not working

Additional context

This behavior started immediately after upgrading to AIO v15.1.0 Beta.

Euro-Office was functioning correctly on previous AIO versions, and the deployment environment and external reverse-proxy configuration remained unchanged.

The diagnostic results suggest that the Euro-Office container itself is operational and that basic internal routing through AIO Apache works.

However, requests through the public HTTPS endpoint fail with HTTP 502.

This appears to be a possible regression in AIO v15.1.0 Beta, potentially affecting Euro-Office integration or HTTP proxy routing.

The exact cause has not yet been identified.

Could you please investigate whether any changes introduced in AIO v15.1.0 Beta could explain this behavior?

Related reports

• https://github.com/nextcloud/all-in-one/issues/8433

• https://github.com/nextcloud/all-in-one/discussions/8687

These reports may describe related Euro-Office connectivity problems, although I cannot confirm that they have the same underlying cause.

[vawaver]

Additional finding: Collabora works correctly

As an additional test, I disabled Euro-Office in Nextcloud AIO and enabled Collabora instead.

After starting Collabora, Nextcloud Office connected successfully, and everything works without any issues.

This confirms that the same Nextcloud AIO installation and existing reverse-proxy configuration work correctly with Collabora.

The issue appears to be specific to Euro-Office in AIO v15.1.0 Beta, rather than a general problem with Nextcloud Office or the deployment environment.

No changes were made to the external reverse-proxy configuration.