Wrong TOKEN on "Open Nextcloud AIO Interface" button

[gruffatremi]

Steps to reproduce

1. Connect to nextcloud at https://server.ip/settings/admin/overview
2. Click on [Open Nextcloud AIO Interface]
3. Get the page with "The login is blocked since Nextcloud is running.
   Please use the automatic login from your Nextcloud."

Expected behavior

1. Connect to nextcloud at https://server.ip/settings/admin/overview
2. Click on [Open Nextcloud AIO Interface]
3. Arrive on Nextcloud AIO admin interface

Actual behavior

The URL in the nextcloud button have the wrong token in the URL, I found the good token by typing sudo docker exec nextcloud-aio-mastercontainer cat /mnt/docker-aio-config/data/configuration.json, it gives me AIO_TOKEN, if I replace it with the wrong one, I am able to connect to the admin interface, but this is not really easy to do always.

Output of sudo docker info

Client: Docker Engine - Community
 Version:    29.3.1
 Context:    default
 Debug Mode: false
 Plugins:
  buildx: Docker Buildx (Docker Inc.)
    Version:  v0.31.1
    Path:     /usr/libexec/docker/cli-plugins/docker-buildx
  compose: Docker Compose (Docker Inc.)
    Version:  v5.1.1
    Path:     /usr/libexec/docker/cli-plugins/docker-compose

Server:
 Containers: 23
  Running: 21
  Paused: 0
  Stopped: 2
 Images: 24
 Server Version: 29.3.1
 Storage Driver: overlay2
  Backing Filesystem: extfs
  Supports d_type: true
  Using metacopy: false
  Native Overlay Diff: true
  userxattr: false
 Logging Driver: json-file
 Cgroup Driver: cgroupfs
 Cgroup Version: 2
 Plugins:
  Volume: local
  Network: bridge host ipvlan macvlan null overlay
  Log: awslogs fluentd gcplogs gelf journald json-file local splunk syslog
 CDI spec directories:
  /etc/cdi
  /var/run/cdi
 Swarm: inactive
 Runtimes: io.containerd.runc.v2 nvidia runc
 Default Runtime: runc
 Init Binary: docker-init
 containerd version: 301b2dac98f15c27117da5c8af12118a041a31d9
 runc version: v1.3.4-0-gd6d73eb8
 init version: de40ad0
 Security Options:
  apparmor
  seccomp
   Profile: builtin
  cgroupns
 Kernel Version: 6.17.0-19-generic
 Operating System: Ubuntu 24.04.4 LTS
 OSType: linux
 Architecture: x86_64
 CPUs: 12
 Total Memory: 7.744GiB
 Name: pihole
 ID: 7baff067-7ff7-47fa-8f74-21f70fb71c14
 Docker Root Dir: /var/lib/docker
 Debug Mode: false
 Experimental: false
 Insecure Registries:
  ::1/128
  127.0.0.0/8
 Live Restore Enabled: false
 Firewall Backend: iptables

Docker run command or docker-compose file that you used

services:
  nextcloud:
    image: nextcloud/all-in-one:latest
    restart: unless-stopped
    container_name: nextcloud-aio-mastercontainer
    ports:
      - "8282:8080"
    environment:
      - APACHE_PORT=11000
      - NEXTCLOUD_MEMORY_LIMIT=2048M
    volumes:
      - nextcloud_aio_mastercontainer:/mnt/docker-aio-config
      - /var/run/docker.sock:/var/run/docker.sock:ro
volumes:
  nextcloud_aio_mastercontainer:
    name: nextcloud_aio_mastercontainer

Output of sudo docker logs nextcloud-aio-mastercontainer

Trying to fix docker.sock permissions internally...
Creating docker group internally with id 988
Initial startup of Nextcloud All-in-One complete!
You should be able to open the Nextcloud AIO Interface now on port 8080 of this server!
E.g. https://internal.ip.of.this.server:8080
⚠️ Important: do always use an ip-address if you access this port and not a domain as HSTS might block access to it later!

If your server has port 80 and 8443 open and you point a domain to your server, you can get a valid certificate automatically by opening the Nextcloud AIO Interface via:
https://your-domain-that-points-to-this-server.tld:8443
[Mon Mar 30 19:57:38.342294 2026] [mpm_event:notice] [pid 176:tid 176] AH00489: Apache/2.4.66 (Unix) OpenSSL/3.5.5 configured -- resuming normal operations
[Mon Mar 30 19:57:38.342358 2026] [core:notice] [pid 176:tid 176] AH00094: Command line: 'httpd -D FOREGROUND'
[30-Mar-2026 19:57:38] NOTICE: fpm is running, pid 181
[30-Mar-2026 19:57:38] NOTICE: ready to handle connections
Deleting duplicate sessions
NOTICE: PHP message: Not starting nextcloud-aio-notify-push because it was already started.
NOTICE: PHP message: Not starting nextcloud-aio-database because it was already started.
NOTICE: PHP message: Not starting nextcloud-aio-redis because it was already started.
NOTICE: PHP message: Not starting nextcloud-aio-fulltextsearch because it was already started.
NOTICE: PHP message: Not starting nextcloud-aio-imaginary because it was already started.
NOTICE: PHP message: Not starting nextcloud-aio-nextcloud because it was already started.
NOTICE: PHP message: Not starting nextcloud-aio-apache because it was already started.
Deleting duplicate sessions
[30-Mar-2026 20:08:41] NOTICE: Terminating ...
[30-Mar-2026 20:08:41] NOTICE: exiting, bye-bye!
[Mon Mar 30 20:08:44.261073 2026] [mpm_event:notice] [pid 176:tid 176] AH00491: caught SIGTERM, shutting down
Initial startup of Nextcloud All-in-One complete!
You should be able to open the Nextcloud AIO Interface now on port 8080 of this server!
E.g. https://internal.ip.of.this.server:8080
⚠️ Important: do always use an ip-address if you access this port and not a domain as HSTS might block access to it later!

If your server has port 80 and 8443 open and you point a domain to your server, you can get a valid certificate automatically by opening the Nextcloud AIO Interface via:
https://your-domain-that-points-to-this-server.tld:8443
[Mon Mar 30 20:08:47.173160 2026] [mpm_event:notice] [pid 162:tid 162] AH00489: Apache/2.4.66 (Unix) OpenSSL/3.5.5 configured -- resuming normal operations
[Mon Mar 30 20:08:47.173220 2026] [core:notice] [pid 162:tid 162] AH00094: Command line: 'httpd -D FOREGROUND'
[30-Mar-2026 20:08:47] NOTICE: fpm is running, pid 167
[30-Mar-2026 20:08:47] NOTICE: ready to handle connections
Deleting duplicate sessions
Deleting duplicate sessions
NOTICE: PHP message: Not starting nextcloud-aio-notify-push because it was already started.
NOTICE: PHP message: Not starting nextcloud-aio-database because it was already started.
NOTICE: PHP message: Not starting nextcloud-aio-redis because it was already started.
NOTICE: PHP message: Not starting nextcloud-aio-fulltextsearch because it was already started.
NOTICE: PHP message: Not starting nextcloud-aio-imaginary because it was already started.
NOTICE: PHP message: Not starting nextcloud-aio-nextcloud because it was already started.
NOTICE: PHP message: Not starting nextcloud-aio-apache because it was already started.
[30-Mar-2026 20:47:49] NOTICE: Terminating ...
[30-Mar-2026 20:47:49] NOTICE: exiting, bye-bye!
[Mon Mar 30 20:47:53.069117 2026] [mpm_event:notice] [pid 162:tid 162] AH00491: caught SIGTERM, shutting down
Initial startup of Nextcloud All-in-One complete!
You should be able to open the Nextcloud AIO Interface now on port 8080 of this server!
E.g. https://internal.ip.of.this.server:8080
⚠️ Important: do always use an ip-address if you access this port and not a domain as HSTS might block access to it later!

If your server has port 80 and 8443 open and you point a domain to your server, you can get a valid certificate automatically by opening the Nextcloud AIO Interface via:
https://your-domain-that-points-to-this-server.tld:8443
[Mon Mar 30 20:49:56.311357 2026] [mpm_event:notice] [pid 164:tid 164] AH00489: Apache/2.4.66 (Unix) OpenSSL/3.5.5 configured -- resuming normal operations
[Mon Mar 30 20:49:56.311439 2026] [core:notice] [pid 164:tid 164] AH00094: Command line: 'httpd -D FOREGROUND'
[30-Mar-2026 20:49:56] NOTICE: fpm is running, pid 169
[30-Mar-2026 20:49:56] NOTICE: ready to handle connections
Deleting duplicate sessions

Output of sudo docker inspect nextcloud-aio-mastercontainer

[
    {
        "Id": "fb3b176dd233ab2de56475dae1ea08171f54670a0bc4642a5b8e59ddfcb4a6a7",
        "Created": "2026-03-30T19:57:36.016373362Z",
        "Path": "/start.sh",
        "Args": [],
        "State": {
            "Status": "running",
            "Running": true,
            "Paused": false,
            "Restarting": false,
            "OOMKilled": false,
            "Dead": false,
            "Pid": 2718,
            "ExitCode": 0,
            "Error": "",
            "StartedAt": "2026-03-30T20:49:36.350810639Z",
            "FinishedAt": "2026-03-30T20:47:56.341529792Z",
            "Health": {
                "Status": "healthy",
                "FailingStreak": 0,
                "Log": [
                    {
                        "Start": "2026-03-30T23:19:15.297433488+02:00",
                        "End": "2026-03-30T23:19:15.378344307+02:00",
                        "ExitCode": 0,
                        "Output": "Connection to 127.0.0.1 80 port [tcp/http] succeeded!\nConnection to 127.0.0.1 8000 port [tcp/*] succeeded!\nConnection to 127.0.0.1 8080 port [tcp/http-alt] succeeded!\nConnection to 127.0.0.1 8443 port [tcp/*] succeeded!\nConnection to 127.0.0.1 9000 port [tcp/*] succeeded!\nConnection to 127.0.0.1 9876 port [tcp/*] succeeded!\n"
                    },
                    {
                        "Start": "2026-03-30T23:19:45.380046649+02:00",
                        "End": "2026-03-30T23:19:45.455343162+02:00",
                        "ExitCode": 0,
                        "Output": "Connection to 127.0.0.1 80 port [tcp/http] succeeded!\nConnection to 127.0.0.1 8000 port [tcp/*] succeeded!\nConnection to 127.0.0.1 8080 port [tcp/http-alt] succeeded!\nConnection to 127.0.0.1 8443 port [tcp/*] succeeded!\nConnection to 127.0.0.1 9000 port [tcp/*] succeeded!\nConnection to 127.0.0.1 9876 port [tcp/*] succeeded!\n"
                    },
                    {
                        "Start": "2026-03-30T23:20:15.456848396+02:00",
                        "End": "2026-03-30T23:20:15.539992766+02:00",
                        "ExitCode": 0,
                        "Output": "Connection to 127.0.0.1 80 port [tcp/http] succeeded!\nConnection to 127.0.0.1 8000 port [tcp/*] succeeded!\nConnection to 127.0.0.1 8080 port [tcp/http-alt] succeeded!\nConnection to 127.0.0.1 8443 port [tcp/*] succeeded!\nConnection to 127.0.0.1 9000 port [tcp/*] succeeded!\nConnection to 127.0.0.1 9876 port [tcp/*] succeeded!\n"
                    },
                    {
                        "Start": "2026-03-30T23:20:45.541003465+02:00",
                        "End": "2026-03-30T23:20:45.612155178+02:00",
                        "ExitCode": 0,
                        "Output": "Connection to 127.0.0.1 80 port [tcp/http] succeeded!\nConnection to 127.0.0.1 8000 port [tcp/*] succeeded!\nConnection to 127.0.0.1 8080 port [tcp/http-alt] succeeded!\nConnection to 127.0.0.1 8443 port [tcp/*] succeeded!\nConnection to 127.0.0.1 9000 port [tcp/*] succeeded!\nConnection to 127.0.0.1 9876 port [tcp/*] succeeded!\n"
                    },
                    {
                        "Start": "2026-03-30T23:21:15.61460557+02:00",
                        "End": "2026-03-30T23:21:15.688676637+02:00",
                        "ExitCode": 0,
                        "Output": "Connection to 127.0.0.1 80 port [tcp/http] succeeded!\nConnection to 127.0.0.1 8000 port [tcp/*] succeeded!\nConnection to 127.0.0.1 8080 port [tcp/http-alt] succeeded!\nConnection to 127.0.0.1 8443 port [tcp/*] succeeded!\nConnection to 127.0.0.1 9000 port [tcp/*] succeeded!\nConnection to 127.0.0.1 9876 port [tcp/*] succeeded!\n"
                    }
                ]
            }
        },
        "Image": "sha256:a58abcb540230ff732b46047325066c0051ee888da0afde2d08fadc33af317af",
        "ResolvConfPath": "/var/lib/docker/containers/fb3b176dd233ab2de56475dae1ea08171f54670a0bc4642a5b8e59ddfcb4a6a7/resolv.conf",
        "HostnamePath": "/var/lib/docker/containers/fb3b176dd233ab2de56475dae1ea08171f54670a0bc4642a5b8e59ddfcb4a6a7/hostname",
        "HostsPath": "/var/lib/docker/containers/fb3b176dd233ab2de56475dae1ea08171f54670a0bc4642a5b8e59ddfcb4a6a7/hosts",
        "LogPath": "/var/lib/docker/containers/fb3b176dd233ab2de56475dae1ea08171f54670a0bc4642a5b8e59ddfcb4a6a7/fb3b176dd233ab2de56475dae1ea08171f54670a0bc4642a5b8e59ddfcb4a6a7-json.log",
        "Name": "/nextcloud-aio-mastercontainer",
        "RestartCount": 0,
        "Driver": "overlay2",
        "Platform": "linux",
        "MountLabel": "",
        "ProcessLabel": "",
        "AppArmorProfile": "docker-default",
        "ExecIDs": null,
        "HostConfig": {
            "Binds": [
                "nextcloud_aio_mastercontainer:/mnt/docker-aio-config:rw",
                "/var/run/docker.sock:/var/run/docker.sock:ro"
            ],
            "ContainerIDFile": "",
            "LogConfig": {
                "Type": "json-file",
                "Config": {}
            },
            "NetworkMode": "nextcloud_default",
            "PortBindings": {
                "8080/tcp": [
                    {
                        "HostIp": "",
                        "HostPort": "8282"
                    }
                ]
            },
            "RestartPolicy": {
                "Name": "unless-stopped",
                "MaximumRetryCount": 0
            },
            "AutoRemove": false,
            "VolumeDriver": "",
            "VolumesFrom": null,
            "ConsoleSize": [
                0,
                0
            ],
            "CapAdd": null,
            "CapDrop": null,
            "CgroupnsMode": "private",
            "Dns": [],
            "DnsOptions": [],
            "DnsSearch": [],
            "ExtraHosts": [],
            "GroupAdd": null,
            "IpcMode": "private",
            "Cgroup": "",
            "Links": null,
            "OomScoreAdj": 0,
            "PidMode": "",
            "Privileged": false,
            "PublishAllPorts": false,
            "ReadonlyRootfs": false,
            "SecurityOpt": null,
            "UTSMode": "",
            "UsernsMode": "",
            "ShmSize": 67108864,
            "Runtime": "runc",
            "Isolation": "",
            "CpuShares": 0,
            "Memory": 0,
            "NanoCpus": 0,
            "CgroupParent": "",
            "BlkioWeight": 0,
            "BlkioWeightDevice": null,
            "BlkioDeviceReadBps": null,
            "BlkioDeviceWriteBps": null,
            "BlkioDeviceReadIOps": null,
            "BlkioDeviceWriteIOps": null,
            "CpuPeriod": 0,
            "CpuQuota": 0,
            "CpuRealtimePeriod": 0,
            "CpuRealtimeRuntime": 0,
            "CpusetCpus": "",
            "CpusetMems": "",
            "Devices": null,
            "DeviceCgroupRules": null,
            "DeviceRequests": null,
            "MemoryReservation": 0,
            "MemorySwap": 0,
            "MemorySwappiness": null,
            "OomKillDisable": null,
            "PidsLimit": null,
            "Ulimits": null,
            "CpuCount": 0,
            "CpuPercent": 0,
            "IOMaximumIOps": 0,
            "IOMaximumBandwidth": 0,
            "MaskedPaths": [
                "/proc/acpi",
                "/proc/asound",
                "/proc/interrupts",
                "/proc/kcore",
                "/proc/keys",
                "/proc/latency_stats",
                "/proc/sched_debug",
                "/proc/scsi",
                "/proc/timer_list",
                "/proc/timer_stats",
                "/sys/devices/virtual/powercap",
                "/sys/firmware"
            ],
            "ReadonlyPaths": [
                "/proc/bus",
                "/proc/fs",
                "/proc/irq",
                "/proc/sys",
                "/proc/sysrq-trigger"
            ]
        },
        "GraphDriver": {
            "Data": {
                "ID": "fb3b176dd233ab2de56475dae1ea08171f54670a0bc4642a5b8e59ddfcb4a6a7",
                "LowerDir": "/var/lib/docker/overlay2/2d0c85665036751754d79175dcd6e0e436922796df8a6cb860b2911fb78e3836-init/diff:/var/lib/docker/overlay2/547e771b6aab4b81709bbfbccc4ab2a4bb34f698ae06ad133fe41ee08cb9bf4e/diff:/var/lib/docker/overlay2/48dda53939ca5c73d5d6999c97834f608a8e15e1cb903c3dd70c7586ff5cf863/diff:/var/lib/docker/overlay2/35972d868c657dedb6cef82c23f21250f3e3e52a474672796297aa33344ebdce/diff:/var/lib/docker/overlay2/c775f6cdc65a00a658425782359d4f3e215362823bad9c8444d7098a8e879772/diff:/var/lib/docker/overlay2/1bb3a0f60d8143d5533b1e5e543bd05922c03804e7bebb1e012925ae043d24a4/diff:/var/lib/docker/overlay2/2c041eb50f498aa02ee0d0c65e9b1845c73b79372b91cabf25e0b340f8427996/diff:/var/lib/docker/overlay2/96cc54d2984cf9bc53070e8b1b5dac8f0a6ae3231968af09906fd811c360261f/diff:/var/lib/docker/overlay2/bb593e083f7a2d5f77d59a17b5ca4f74b5c5942a4b3847936343155909fef8c8/diff:/var/lib/docker/overlay2/ded8db0db9b97c268c3add028319e2bd6ee7f547a63dd7fef3c76294953883b0/diff:/var/lib/docker/overlay2/300903c276f58d848bba5f308c7175eb514d95c458a7ef78f93ac339a0232f51/diff:/var/lib/docker/overlay2/ffcf4963ad9af4da0a370ae0af33ce22b0421e6a28143c57b7e516476dddd817/diff:/var/lib/docker/overlay2/aaaea24e1aaf5b58bf4898eef2214a0d6e429643380076c7b21bfbeb0724bf5f/diff:/var/lib/docker/overlay2/45fc5f8138b752ac2f2a12d3999b9ddfcf48c3bf86ea020cbfd9ab46ffda8ad8/diff:/var/lib/docker/overlay2/6ea37952185c8445fd1150c0ea80db7f9cc5646b74b36facf3ba0af3d8261962/diff:/var/lib/docker/overlay2/eafc8d51b8441eeb8fb71a26aab9a2157e157a4394a5e6a740472878aa839387/diff:/var/lib/docker/overlay2/683cf9563c52a966084db1d3d6243515bed090691ffcb1cbf19e604334cd3bae/diff:/var/lib/docker/overlay2/bede6bf430909b40ea46b4fdba1d06362df5863022c556f61b572e14c1945080/diff:/var/lib/docker/overlay2/2198a53fb5627ac25f3de90aa3a095d536ccc2b5ac8e54d988fbc6c10aa268c6/diff:/var/lib/docker/overlay2/e1a1de319e626552987b47aa280ec807f4de842f0b0f6b61e7e65c986cd6841d/diff:/var/lib/docker/overlay2/160dfe34ade4edcffea217603012264f341392c29d72c338e769245df264d82c/diff:/var/lib/docker/overlay2/8acc4136ebe8cf63aeac2b703f07f0d807d5b8757d4bf12904bca2e7ab25fc55/diff",
                "MergedDir": "/var/lib/docker/overlay2/2d0c85665036751754d79175dcd6e0e436922796df8a6cb860b2911fb78e3836/merged",
                "UpperDir": "/var/lib/docker/overlay2/2d0c85665036751754d79175dcd6e0e436922796df8a6cb860b2911fb78e3836/diff",
                "WorkDir": "/var/lib/docker/overlay2/2d0c85665036751754d79175dcd6e0e436922796df8a6cb860b2911fb78e3836/work"
            },
            "Name": "overlay2"
        },
        "Mounts": [
            {
                "Type": "bind",
                "Source": "/var/run/docker.sock",
                "Destination": "/var/run/docker.sock",
                "Mode": "ro",
                "RW": false,
                "Propagation": "rprivate"
            },
            {
                "Type": "volume",
                "Name": "nextcloud_aio_mastercontainer",
                "Source": "/var/lib/docker/volumes/nextcloud_aio_mastercontainer/_data",
                "Destination": "/mnt/docker-aio-config",
                "Driver": "local",
                "Mode": "rw",
                "RW": true,
                "Propagation": ""
            }
        ],
        "Config": {
            "Hostname": "fb3b176dd233",
            "Domainname": "",
            "User": "root",
            "AttachStdin": false,
            "AttachStdout": true,
            "AttachStderr": true,
            "ExposedPorts": {
                "80/tcp": {},
                "8080/tcp": {},
                "8443/tcp": {},
                "9000/tcp": {}
            },
            "Tty": false,
            "OpenStdin": false,
            "StdinOnce": false,
            "Env": [
                "APACHE_PORT=11000",
                "NEXTCLOUD_MEMORY_LIMIT=2048M",
                "PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin",
                "PHPIZE_DEPS=autoconf \t\tdpkg-dev dpkg \t\tfile \t\tg++ \t\tgcc \t\tlibc-dev \t\tmake \t\tpkgconf \t\tre2c",
                "PHP_INI_DIR=/usr/local/etc/php",
                "PHP_CFLAGS=-fstack-protector-strong -fpic -fpie -O2 -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64",
                "PHP_CPPFLAGS=-fstack-protector-strong -fpic -fpie -O2 -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64",
                "PHP_LDFLAGS=-Wl,-O1 -pie",
                "GPG_KEYS=1198C0117593497A5EC5C199286AF1F9897469DC 49D9AF6BC72A80D6691719C8AA23F5BE9C7097D4 D95C03BC702BE9515344AE3374E44BC9067701A5",
                "PHP_VERSION=8.5.3",
                "PHP_URL=https://www.php.net/distributions/php-8.5.3.tar.xz",
                "PHP_ASC_URL=https://www.php.net/distributions/php-8.5.3.tar.xz.asc",
                "PHP_SHA256=ce65725b8af07356b69a6046d21487040b11f2acfde786de38b2bfb712c36eb9",
                "HOME=/var/www"
            ],
            "Cmd": null,
            "Healthcheck": {
                "Test": [
                    "CMD-SHELL",
                    "/healthcheck.sh"
                ]
            },
            "Image": "nextcloud/all-in-one:latest",
            "Volumes": null,
            "WorkingDir": "/var/www/docker-aio",
            "Entrypoint": [
                "/start.sh"
            ],
            "Labels": {
                "com.docker.compose.config-hash": "e400cb1977b24fc716bb01117b099d01a959f47e7e6fd858182d25564e810abe",
                "com.docker.compose.container-number": "1",
                "com.docker.compose.depends_on": "",
                "com.docker.compose.image": "sha256:a58abcb540230ff732b46047325066c0051ee888da0afde2d08fadc33af317af",
                "com.docker.compose.oneoff": "False",
                "com.docker.compose.project": "nextcloud",
                "com.docker.compose.project.config_files": "/root/nextcloud/compose.yaml",
                "com.docker.compose.project.working_dir": "/root/nextcloud",
                "com.docker.compose.service": "nextcloud",
                "com.docker.compose.version": "5.1.1",
                "org.label-schema.vendor": "Nextcloud",
                "wud.watch": "false"
            },
            "StopSignal": "SIGQUIT"
        },
        "NetworkSettings": {
            "SandboxID": "d8e93c459d2cd8f1b40fb238cfe1885f4ae37c59e25f71071aab94fbbc92f839",
            "SandboxKey": "/var/run/docker/netns/d8e93c459d2c",
            "Ports": {
                "80/tcp": null,
                "8080/tcp": [
                    {
                        "HostIp": "0.0.0.0",
                        "HostPort": "8282"
                    },
                    {
                        "HostIp": "::",
                        "HostPort": "8282"
                    }
                ],
                "8443/tcp": null,
                "9000/tcp": null
            },
            "Networks": {
                "nextcloud-aio": {
                    "IPAMConfig": null,
                    "Links": null,
                    "Aliases": null,
                    "DriverOpts": null,
                    "GwPriority": 0,
                    "NetworkID": "a5c24d69ae50afca03fb18b33a87e09bf49253c484ab3b5dec92b496e222b684",
                    "EndpointID": "2ba3b2c0a2f2d86ff6b247ee01b39148a39c348bcb7c960610aee3bb2ece6092",
                    "Gateway": "172.23.0.1",
                    "IPAddress": "172.23.0.4",
                    "MacAddress": "fa:b2:c0:12:b8:28",
                    "IPPrefixLen": 16,
                    "IPv6Gateway": "fdcf:7d8e:e3f5::1",
                    "GlobalIPv6Address": "fdcf:7d8e:e3f5::4",
                    "GlobalIPv6PrefixLen": 64,
                    "DNSNames": [
                        "nextcloud-aio-mastercontainer",
                        "fb3b176dd233"
                    ]
                },
                "nextcloud_default": {
                    "IPAMConfig": null,
                    "Links": null,
                    "Aliases": [
                        "nextcloud-aio-mastercontainer",
                        "nextcloud"
                    ],
                    "DriverOpts": null,
                    "GwPriority": 0,
                    "NetworkID": "a733b1131ff82bda7df849900d57e0df301b270e03e9e3118b3f4fb6e690aae6",
                    "EndpointID": "e4e0f7be142c47ed76384d7451f8eba26dad35d9b4820f28b9de06d7e09f35df",
                    "Gateway": "172.21.0.1",
                    "IPAddress": "172.21.0.2",
                    "MacAddress": "96:5c:0e:05:e8:e8",
                    "IPPrefixLen": 16,
                    "IPv6Gateway": "fdcf:7d8e:e3f5:1::1",
                    "GlobalIPv6Address": "fdcf:7d8e:e3f5:1::2",
                    "GlobalIPv6PrefixLen": 64,
                    "DNSNames": [
                        "nextcloud-aio-mastercontainer",
                        "nextcloud",
                        "fb3b176dd233"
                    ]
                }
            }
        }
    }
]
 

Output of sudo docker ps -a

Other valuable info

[szaimen]

Hi, I fear I cannot reproduce this on my test instance. Can you please log into the aio interface manually, stop the containers via the aio-interface, start them again via the aio-interface and then log out of the aio-interface. Afterwards open the admin overview inside nextcloud and click the button again and see if that makes it work?

[DocSnibble]

Hi, I have the exact same problem.
Unfortunately, your proposed workaround didn't solve the problem in my case.
I still get redirected to the page with the "The login is blocked since Nextcloud is running. ..." message.
The AIO_TOKEN from the button still mismatches the one in the configuration.json file.

[domisjustanumber]

I have the same issue and discovered the cause!

How to avoid / reproduce it

When restarting containers, the browser issues a page refresh to get new status. On Firefox at least, that causes this pop-up to appear. Do not click Resend!

Click Cancel, and Nextcloud will start up and the AIO auto-login will work as expected.

How to fix it

If you know the passphrase, you can regain access by following the instructions on the UI. Stop the apache container, log into AIO with the passphrase, stop the containers, start the containers, DO NOT PRESS RESEND, all is well.

If you don't know the passphrase, you can cause AIO to do a full container restart using the command line and that will resync the AIO_TOKENS and restore access to the AIO UI from the Nextcloud Admin UI:

docker exec --env STOP_CONTAINERS=1 nextcloud-aio-mastercontainer /daily-backup.sh

docker exec --env START_CONTAINERS=1 nextcloud-aio-mastercontainer /daily-backup.sh
(wait a few minutes after issuing this for the containers to actually start)

Obviously add sudo to the start if you need it.

Now go to your Nextcloud Admin UI page and the Open Nextcloud AIO Interface button will work again.

I have tested the cause and the fix multiple times and it seems to be consistent.

What causes it

The issue is AIO generates a new AIO_TOKEN each time Start containers is clicked. Clicking Resend causes another AIO_TOKEN to be generated, which results in Nextcloud having the first AIO_TOKEN, and AIO having the second (non-matching) AIO_TOKEN that was generated.

Specifically, this was introduced with the new iframe status pop-up. The <form target="overlay-log"> submits a real POST navigation into the iframe. The browser's history for that iframe held a POST entry, so any reload (manual or triggered by the page) could prompt the "Resend," which would fire startTopContainer() a second time and rotate AIO_TOKEN.

A possible fix

There are a few ways to work around this, but after some poking to keep the change to a single file, Cursor suggested this as a replacement for the initForms function in forms.js. I have not tested this fix, so take or leave as you wish 😆

event.preventDefault() stops the browser from navigating the iframe. Instead, fetch() makes the POST from the parent page's JS context, reads the streamed response chunk-by-chunk via ReadableStream, and writes each chunk into the iframe with document.write(). When the stream ends, it reloads the parent page (same behavior as before). The iframe never has a POST in its navigation history, so there is no "Resend" prompt — ever.

function initForms() {
    const forms = document.querySelectorAll('form.xhr')
    for (const form of forms) {
      initForm(form);
    }
    const overlayLogForms = document.querySelectorAll('form[target="overlay-log"]')
    for (const form of overlayLogForms) {
        form.onsubmit = function(event) {
            event.preventDefault();
            enableSpinner();
            var iframe = document.getElementById('overlay-log');
            iframe.classList.add('visible');
            var iframeDoc = iframe.contentDocument || iframe.contentWindow.document;
            iframeDoc.open();

            fetch(form.getAttribute('action'), {
                method: 'POST',
                headers: { 'Content-Type': 'application/x-www-form-urlencoded' },
                body: new URLSearchParams(new FormData(form))
            }).then(function(response) {
                var reader = response.body.getReader();
                var decoder = new TextDecoder();

                function pump() {
                    return reader.read().then(function(result) {
                        if (result.done) {
                            iframeDoc.close();
                            location.reload();
                            return;
                        }
                        iframeDoc.write(decoder.decode(result.value, { stream: true }));
                        return pump();
                    });
                }

                return pump();
            }).catch(function() {
                disableSpinner();
                showError('Failed to talk to server.');
            });
        };
    }
  }

[szaimen]

Thanks for investigation! We have a fix for this scheduled in #7851

[domisjustanumber]

Wow that was fast! And as expected, your fix is much more elegant